proxmox-mirrors/proxmox-ve-rs
1
0
Fork 0
mirror of https://git.proxmox.com/git/proxmox-ve-rs synced 2025-10-04 10:01:27 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

config: firewall: add tests for interface and directions

Browse Source 
Add tests for validating the directions in the guest firewall
configuration. While I'm at it, I also added tests for validating
interface names, since this functionality did not get tested before.

Signed-off-by: Stefan Hanreich <s.hanreich@proxmox.com>
Reviewed-by: Wolfgang Bumiller <w.bumiller@proxmox.com>
This commit is contained in:
Stefan Hanreich 2024-11-15 13:10:54 +01:00 committed by Thomas Lamprecht
parent b44e3d69f9
commit 371ab71240
1 changed files with 53 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

53
proxmox-ve-config/src/firewall/guest.rs
View File

@ -247,4 +247,57 @@ policy_forward: DROP
}
);
}
#[test]
fn test_parse_valid_interface_prefix() {
const CONFIG: &str = r#"
[RULES]
IN ACCEPT -p udp -dport 33 -sport 22 -log warning -i tapeth0
"#;
let config = CONFIG.as_bytes();
let network_config: Vec<u8> = Vec::new();
Config::parse(&Vmid::new(100), "tap", config, network_config.as_slice()).unwrap_err();
}
#[test]
fn test_parse_invalid_interface_prefix() {
const CONFIG: &str = r#"
[RULES]
IN ACCEPT -p udp -dport 33 -sport 22 -log warning -i eth0
"#;
let config = CONFIG.as_bytes();
let network_config: Vec<u8> = Vec::new();
Config::parse(&Vmid::new(100), "tap", config, network_config.as_slice()).unwrap_err();
}
#[test]
fn test_parse_valid_directions() {
const CONFIG: &str = r#"
[RULES]
IN ACCEPT -p udp -dport 33 -sport 22 -log warning
OUT ACCEPT -p udp -dport 33 -sport 22 -log warning
"#;
let config = CONFIG.as_bytes();
let network_config: Vec<u8> = Vec::new();
Config::parse(&Vmid::new(100), "tap", config, network_config.as_slice()).unwrap();
}
#[test]
fn test_parse_invalid_direction() {
const CONFIG: &str = r#"
[RULES]
FORWARD ACCEPT -p udp -dport 33 -sport 22 -log warning
"#;
let config = CONFIG.as_bytes();
let network_config: Vec<u8> = Vec::new();
Config::parse(&Vmid::new(100), "tap", config, network_config.as_slice()).unwrap_err();
}
}