Date: Mon, 20 Jun 2022 09:09:08 GMT From: Kristof Provost <kp@FreeBSD.org> To: src-committers@FreeBSD.org, dev-commits-src-all@FreeBSD.org, dev-commits-src-main@FreeBSD.org Subject: git: 7b271afd6277 - main - pf tests: basic 'tagged' test for Ethernet rules Message-ID: <202206200909.25K998ff004520@gitrepo.freebsd.org>
next in thread | raw e-mail | index | archive | help
The branch main has been updated by kp: URL: https://cgit.FreeBSD.org/src/commit/?id=7b271afd62777ea81e96914d143905fc047e9a08 commit 7b271afd62777ea81e96914d143905fc047e9a08 Author: Kristof Provost <kp@FreeBSD.org> AuthorDate: 2022-05-31 12:40:05 +0000 Commit: Kristof Provost <kp@FreeBSD.org> CommitDate: 2022-06-20 08:16:20 +0000 pf tests: basic 'tagged' test for Ethernet rules Sponsored by: Rubicon Communications, LLC ("Netgate") Differential Revision: https://reviews.freebsd.org/D35363 --- tests/sys/netpfil/pf/ether.sh | 42 ++++++++++++++++++++++++++++++++++++++++++ 1 file changed, 42 insertions(+) diff --git a/tests/sys/netpfil/pf/ether.sh b/tests/sys/netpfil/pf/ether.sh index 7a8b9e0d9b38..dc580b234c39 100644 --- a/tests/sys/netpfil/pf/ether.sh +++ b/tests/sys/netpfil/pf/ether.sh @@ -553,6 +553,47 @@ ip_cleanup() pft_cleanup } +atf_test_case "match_tag" "cleanup" +match_tag_head() +{ + atf_set descr 'Test matching tags' + atf_set require.user root +} + +match_tag_body() +{ + pft_init + + epair=$(vnet_mkepair) + + vnet_mkjail alcatraz ${epair}b + + ifconfig ${epair}a 192.0.2.1/24 up + jexec alcatraz ifconfig ${epair}b 192.0.2.2/24 up + + # Sanity check + atf_check -s exit:0 -o ignore ping -c 1 192.0.2.2 + + jexec alcatraz pfctl -e + pft_set_rules alcatraz \ + "ether block out tagged foo" \ + "pass in proto icmp tag foo" + + atf_check -s exit:2 -o ignore ping -c 1 192.0.2.2 + + pft_set_rules alcatraz \ + "ether block out tagged bar" \ + "pass in proto icmp tag foo" + + # Still passes when tagged differently + atf_check -s exit:0 -o ignore ping -c 1 192.0.2.2 +} + +match_tag_cleanup() +{ + pft_cleanup +} + atf_init_test_cases() { atf_add_test_case "mac" @@ -563,4 +604,5 @@ atf_init_test_cases() atf_add_test_case "dummynet" atf_add_test_case "anchor" atf_add_test_case "ip" + atf_add_test_case "match_tag" }
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?202206200909.25K998ff004520>