Skip to contentSkip to conversation

nfsim-testsuite: don't depend on NAT for name lookup checks

PATCH In review KOVACS Krisztian 1 participant 1 message Nov 5, 2005 netfilter

lore
Share & tools
lore

KOVACS Krisztian

author
#0 lore raw

PATCH 1/3 nfsim-testsuite: don't depend on NAT for name lookup checks

Hi,

The current test for iptables name lookups and the -n option depends
on NAT. This is bad, as nf_conntrack does not support NAT.

Signature · 2 lines
 Regards,
  Krisztian Kovacs

Don't depend on NAT to check whether NS lookup is working.

01iptables/15namelookup.sim +5 -5
Index: nfsim-testsuite/01iptables/15namelookup.sim
===================================================================
@@ -1,13 +1,13 @@
 # Test that name lookup works.
 
 # This succeeds.
-iptables -t nat -A POSTROUTING -s localhost -d localhost -p tcp -j SNAT --to-source 192.168.1.1
-iptables -t nat -D POSTROUTING -s 127.0.0.1 -d 127.0.0.1 -p tcp -j SNAT --to-source 192.168.1.1
+iptables -A INPUT -s localhost -d localhost -p tcp -j ACCEPT
+iptables -D INPUT -s 127.0.0.1 -d 127.0.0.1 -p tcp -j ACCEPT
 
 # These will fail.
 expect iptables iptables: command failed
-iptables -t nat -A POSTROUTING -n -s localhost -d 127.0.0.1 -p 6 -j SNAT --to-source 192.168.1.1
+iptables -A INPUT -n -s localhost -d 127.0.0.1 -p 6 -j ACCEPT
 expect iptables iptables: command failed
-iptables -t nat -A POSTROUTING -n -s 127.0.0.1 -d localhost -p 6 -j SNAT --to-source 192.168.1.1
+iptables -A INPUT -n -s 127.0.0.1 -d localhost -p 6 -j ACCEPT
 expect iptables iptables: command failed
-iptables -t nat -A POSTROUTING -n -s 127.0.0.1 -d 127.0.0.1 -p tcp -j SNAT --to-source 192.168.1.1 
+iptables -A INPUT -n -s 127.0.0.1 -d 127.0.0.1 -p tcp -j ACCEPT