1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
|
#!/bin/bash
# NFT_TEST_REQUIRES(NFT_TEST_HAVE_chain_binding)
# NFT_TEST_REQUIRES(NFT_TEST_HAVE_netdev_chain_multidevice)
set -e
iface_cleanup() {
ip link del d0 &>/dev/null || :
ip link del d1 &>/dev/null || :
ip link del d2 &>/dev/null || :
}
trap 'iface_cleanup' EXIT
ip link add d0 type dummy
ip link add d1 type dummy
ip link add d2 type dummy
load_ruleset() {
family=$1
# Test auto-removal of chain hook on device removal
RULESET="table $family x {
chain x {}
chain w {
ip daddr 8.7.6.0/24 jump {
ip daddr vmap { 8.7.6.3 : jump x, 8.7.6.4 : jump x }
}
}
chain y {
type filter hook ingress devices = { d0, d1, d2 } priority 0;
ip saddr { 1.2.3.4, 2.3.4.5 } counter
ip daddr vmap { 5.4.3.0/24 : jump w, 8.9.0.0/24 : jump x }
}
}"
$NFT -c -f - <<< $RULESET
$NFT -f - <<< $RULESET
}
load_ruleset "inet"
load_ruleset "netdev"
|
