| Message ID | 20231109162304.119506-4-pablo@netfilter.org |
|---|---|
| State | Changes Requested |
| Headers | show |
| Series | update tests/shell for 5.4 kernels | expand |
Pablo Neira Ayuso <pablo@netfilter.org> wrote: > Skip tests that require reject at prerouting hook. > > Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org> > --- > tests/shell/features/prerouting_reject.nft | 8 ++++++++ > tests/shell/testcases/optimizations/ruleset | 2 ++ > 2 files changed, 10 insertions(+) > create mode 100644 tests/shell/features/prerouting_reject.nft > > diff --git a/tests/shell/features/prerouting_reject.nft b/tests/shell/features/prerouting_reject.nft > new file mode 100644 > index 000000000000..26098bb54534 > --- /dev/null > +++ b/tests/shell/features/prerouting_reject.nft > @@ -0,0 +1,8 @@ > +# f53b9b0bdc59 netfilter: introduce support for reject at prerouting stage > +# v5.13-rc1~94^2~10^2~2 # v5.9-rc1~133^2~302^2~11
diff --git a/tests/shell/features/prerouting_reject.nft b/tests/shell/features/prerouting_reject.nft new file mode 100644 index 000000000000..26098bb54534 --- /dev/null +++ b/tests/shell/features/prerouting_reject.nft @@ -0,0 +1,8 @@ +# f53b9b0bdc59 netfilter: introduce support for reject at prerouting stage +# v5.13-rc1~94^2~10^2~2 +table inet t { + chain nat_filter { + type filter hook prerouting priority 0; policy accept; + reject with icmpx type host-unreachable + } +} diff --git a/tests/shell/testcases/optimizations/ruleset b/tests/shell/testcases/optimizations/ruleset index ef2652dbeae8..2b2d80ffc009 100755 --- a/tests/shell/testcases/optimizations/ruleset +++ b/tests/shell/testcases/optimizations/ruleset @@ -1,5 +1,7 @@ #!/bin/bash +# NFT_TEST_REQUIRES(NFT_TEST_HAVE_prerouting_reject) + RULESET="table inet uni { chain gtfo { reject with icmpx type host-unreachable
Skip tests that require reject at prerouting hook. Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org> --- tests/shell/features/prerouting_reject.nft | 8 ++++++++ tests/shell/testcases/optimizations/ruleset | 2 ++ 2 files changed, 10 insertions(+) create mode 100644 tests/shell/features/prerouting_reject.nft