Blob Blame History Raw
From 74299cc917244ede3bb1cf87345123e898c73a12 Mon Sep 17 00:00:00 2001
From: Eric Garver <eric@garver.life>
Date: Thu, 27 Feb 2020 08:45:36 -0500
Subject: [PATCH 151/154] test: more coverage for ipv6 addresses with brackets

This covers other features: zone source, forward ports, rich rule
source/destination.

(cherry picked from commit 229a6f3c21f3b1ce8c3759c3ead65e750e31dd32)
(cherry picked from commit 9c480863fca64923aafa8483f7603b9b14c0a0e0)
---
 src/tests/regression/rhbz1779835.at | 17 ++++++++++++++++-
 1 file changed, 16 insertions(+), 1 deletion(-)

diff --git a/src/tests/regression/rhbz1779835.at b/src/tests/regression/rhbz1779835.at
index 2662271eb459..37d1afc990ab 100644
--- a/src/tests/regression/rhbz1779835.at
+++ b/src/tests/regression/rhbz1779835.at
@@ -1,5 +1,5 @@
 FWD_START_TEST([ipv6 address with brackets])
-AT_KEYWORDS(rhbz1779835 ipset)
+AT_KEYWORDS(rhbz1779835 ipset zone forward_port rich)
 
 dnl ipset
 FWD_CHECK([-q --permanent --new-ipset=foobar --type=hash:ip --family=inet6])
@@ -8,4 +8,19 @@ FWD_CHECK([-q --permanent --new-ipset=foobar2 --type=hash:net --family=inet6])
 FWD_CHECK([[-q --permanent --ipset foobar2 --add-entry='[1234::]/64']])
 FWD_RELOAD
 
+dnl zone source
+FWD_CHECK([[-q --zone internal --add-source='[::1234]']])
+FWD_CHECK([[-q --zone internal --add-source='[1234::]/64']])
+
+dnl forward ports
+FWD_CHECK([[-q --zone internal --add-forward-port=port=1234:proto=tcp:toport=4321:toaddr=[::1234]]])
+FWD_CHECK([[-q --zone internal --add-rich-rule='rule family=ipv6 source address=[::4321] forward-port port="1234" protocol=tcp to-port="4321" to-addr="[::1234]"']])
+FWD_CHECK([[-q --zone internal --add-rich-rule='rule family=ipv6 source address=[1234::]/64 forward-port port="1234" protocol=tcp to-port="4321" to-addr="[::1234]"']])
+
+dnl rich rule source/destination
+FWD_CHECK([[-q --zone internal --add-rich-rule='rule family=ipv6 source address=[::4321] accept']])
+FWD_CHECK([[-q --zone internal --add-rich-rule='rule family=ipv6 source address=[1234::]/64 accept']])
+FWD_CHECK([[-q --zone internal --add-rich-rule='rule family=ipv6 destination address=[::4321] accept']])
+FWD_CHECK([[-q --zone internal --add-rich-rule='rule family=ipv6 destination address=[1234::]/64 accept']])
+
 FWD_END_TEST
-- 
2.25.2