Page MenuHomeFreeBSD
Differential D30247

pf tests: Test the ability to kill floating states by interface
ClosedPublic
Actions

Authored by kp on May 13 2021, 11:49 AM.
Tags
None
Referenced Files
Unknown Object (File)
Mar 12 2025, 9:35 PM
Unknown Object (File)
Feb 24 2025, 9:02 PM
Unknown Object (File)
Feb 8 2025, 4:00 PM
Unknown Object (File)
Jan 30 2025, 5:42 AM
Unknown Object (File)
Jan 28 2025, 11:41 PM
Unknown Object (File)
Jan 24 2025, 5:18 PM
Unknown Object (File)
Jan 17 2025, 3:36 PM
Unknown Object (File)
Jan 16 2025, 3:32 AM
View All 74 Files
Subscribers
farrokhi
imp
melifaro

Details

Reviewers
eri
Group Reviewers
network
Commits
rG3c790f9e1d54: pf tests: Test the ability to kill floating states by interface
rG4e7aa605e57a: pf tests: Test the ability to kill floating states by interface
rG7bd7933f9a4f: pf tests: Test the ability to kill floating states by interface
Summary

MFC after: 1 week
Sponsored by: Rubicon Communications, LLC ("Netgate")

Diff Detail

Repository
rS FreeBSD src repository - subversion
Lint
Lint Passed
Unit
No Test Coverage
Build Status
Buildable 39166
Build 36055: arc lint + arc unit

Revision Contents
Changeset List

PathSize
tests/
sys/
netpfil/
pf/
60 lines

Diff 89126

View Options

tests/sys/netpfil/pf/killstate.sh

#include <sys/types.h> #include <sys/types.h>
#include <arpa/inet.h> #include <arpa/inet.h>
#include <netinet/ip.h> #include <netinet/ip.h>
#include <netinet/udp.h> #include <netinet/udp.h>
#ifndef _UTIL_H #ifndef _UTIL_H
#define _UTIL_H #define _UTIL_H
/* common ip ranges */
extern struct in_addr masq, pub, prv1, prv2, prv3, cgn, ext, ANY_ADDR;
int randcmp(const void *a, const void *b); int randcmp(const void *a, const void *b);
void hexdump(void *p, size_t len); void hexdump(void *p, size_t len);
struct ip * ip_packet(struct in_addr src, struct in_addr dst, u_char protocol, size_t len); struct ip * ip_packet(struct in_addr src, struct in_addr dst, u_char protocol, size_t len);
struct udphdr * set_udp(struct ip *p, u_short sport, u_short dport); struct udphdr * set_udp(struct ip *p, u_short sport, u_short dport);
inline int inline int
addr_eq(struct in_addr a, struct in_addr b) addr_eq(struct in_addr a, struct in_addr b)
{ {
return a.s_addr == b.s_addr; return a.s_addr == b.s_addr;
} }
#define a2h(a) ntohl(a.s_addr) #define a2h(a) ntohl(a.s_addr)
inline int inline int
rand_range(int min, int max) rand_range(int min, int max)
{ {
return min + rand()%(max - min); return min + rand()%(max - min);
} }
#define NAT_CHECK(pip, src, msq) do { \
int res; \
int len = ntohs(pip->ip_len); \
struct in_addr dst = pip->ip_dst; \
pip->ip_src = src; \
res = LibAliasOut(la, pip, len); \
ATF_CHECK_MSG(res == PKT_ALIAS_OK, \
">%d< not met PKT_ALIAS_OK", res); \
ATF_CHECK(addr_eq(msq, pip->ip_src)); \
ATF_CHECK(addr_eq(dst, pip->ip_dst)); \
} while(0)
#define NAT_FAIL(pip, src, dst) do { \
int res; \
int len = ntohs(pip->ip_len); \
pip->ip_src = src; \
pip->ip_dst = dst; \
res = LibAliasOut(la, pip, len); \
ATF_CHECK_MSG(res != PKT_ALIAS_OK), \
">%d< not met !PKT_ALIAS_OK", res); \
ATF_CHECK(addr_eq(src, pip->ip_src)); \
ATF_CHECK(addr_eq(dst, pip->ip_dst)); \
} while(0)
#define UNNAT_CHECK(pip, src, dst, rel) do { \
int res; \
int len = ntohs(pip->ip_len); \
pip->ip_src = src; \
pip->ip_dst = dst; \
res = LibAliasIn(la, pip, len); \
ATF_CHECK_MSG(res == PKT_ALIAS_OK, \
">%d< not met PKT_ALIAS_OK", res); \
ATF_CHECK(addr_eq(src, pip->ip_src)); \
ATF_CHECK(addr_eq(rel, pip->ip_dst)); \
} while(0)
#define UNNAT_FAIL(pip, src, dst) do { \
int res; \
int len = ntohs(pip->ip_len); \
pip->ip_src = src; \
pip->ip_dst = dst; \
res = LibAliasIn(la, pip, len); \
ATF_CHECK_MSG(res != PKT_ALIAS_OK, \
">%d< not met !PKT_ALIAS_OK", res); \
ATF_CHECK(addr_eq(src, pip->ip_src)); \
ATF_CHECK(addr_eq(dst, pip->ip_dst)); \
} while(0)
#endif /* _UTIL_H */ #endif /* _UTIL_H */