946bb34b50
- tests: py: add dnat to port without defining destination address - evaluate: fix inet nat with no layer 3 info - include: missing sctp_chunk.h in Makefile.am - exthdr: Implement SCTP Chunk matching - scanner: sctp: Move to own scope - scanner: introduce start condition stack - json: Simplify non-tcpopt exthdr printing a bit Resolves: rhbz#2018023, rhbz#2030314
76 lines
2.2 KiB
Diff
76 lines
2.2 KiB
Diff
From 00d3745306aa87eeb2466dbb5e6958225de3354f Mon Sep 17 00:00:00 2001
|
|
From: Pablo Neira Ayuso <pablo@netfilter.org>
|
|
Date: Thu, 22 Jul 2021 17:43:56 +0200
|
|
Subject: [PATCH] tests: py: add dnat to port without defining destination
|
|
address
|
|
|
|
Add a test to cover dnat to port without destination address.
|
|
|
|
Closes: https://bugzilla.netfilter.org/show_bug.cgi?id=1428
|
|
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
|
|
(cherry picked from commit 0f27e258b37a592233d6ad5381cd1fae65e57514)
|
|
---
|
|
tests/py/inet/dnat.t | 1 +
|
|
tests/py/inet/dnat.t.json | 20 ++++++++++++++++++++
|
|
tests/py/inet/dnat.t.payload | 7 +++++++
|
|
3 files changed, 28 insertions(+)
|
|
|
|
diff --git a/tests/py/inet/dnat.t b/tests/py/inet/dnat.t
|
|
index b460af3925570..e4e169f2bc3ec 100644
|
|
--- a/tests/py/inet/dnat.t
|
|
+++ b/tests/py/inet/dnat.t
|
|
@@ -6,6 +6,7 @@ iifname "foo" tcp dport 80 redirect to :8080;ok
|
|
|
|
iifname "eth0" tcp dport 443 dnat ip to 192.168.3.2;ok
|
|
iifname "eth0" tcp dport 443 dnat ip6 to [dead::beef]:4443;ok
|
|
+meta l4proto tcp dnat to :80;ok;meta l4proto 6 dnat to :80
|
|
|
|
dnat ip to ct mark map { 0x00000014 : 1.2.3.4};ok
|
|
dnat ip to ct mark . ip daddr map { 0x00000014 . 1.1.1.1 : 1.2.3.4};ok
|
|
diff --git a/tests/py/inet/dnat.t.json b/tests/py/inet/dnat.t.json
|
|
index 1b8aba6297d36..c341a0455fea1 100644
|
|
--- a/tests/py/inet/dnat.t.json
|
|
+++ b/tests/py/inet/dnat.t.json
|
|
@@ -219,3 +219,23 @@
|
|
}
|
|
]
|
|
|
|
+# meta l4proto tcp dnat to :80
|
|
+[
|
|
+ {
|
|
+ "match": {
|
|
+ "left": {
|
|
+ "meta": {
|
|
+ "key": "l4proto"
|
|
+ }
|
|
+ },
|
|
+ "op": "==",
|
|
+ "right": 6
|
|
+ }
|
|
+ },
|
|
+ {
|
|
+ "dnat": {
|
|
+ "port": 80
|
|
+ }
|
|
+ }
|
|
+]
|
|
+
|
|
diff --git a/tests/py/inet/dnat.t.payload b/tests/py/inet/dnat.t.payload
|
|
index a741b9cbdb8d7..be5baf8fd4b47 100644
|
|
--- a/tests/py/inet/dnat.t.payload
|
|
+++ b/tests/py/inet/dnat.t.payload
|
|
@@ -77,3 +77,10 @@ inet
|
|
[ immediate reg 2 0x00005000 ]
|
|
[ nat dnat ip addr_min reg 1 addr_max reg 0 proto_min reg 2 proto_max reg 0 flags 0x2 ]
|
|
|
|
+# meta l4proto tcp dnat to :80
|
|
+inet
|
|
+ [ meta load l4proto => reg 1 ]
|
|
+ [ cmp eq reg 1 0x00000006 ]
|
|
+ [ immediate reg 1 0x00005000 ]
|
|
+ [ nat dnat inet proto_min reg 1 flags 0x2 ]
|
|
+
|
|
--
|
|
2.34.1
|
|
|