selftests: nft_nat: Simplify port shadow notrack test

Browse source

The second rule in prerouting chain was probably a leftover: The router
listens on veth0, so not tracking connections via that interface is
sufficient. Likewise, the rule in output chain can be limited to that
interface as well.

Signed-off-by: Phil Sutter <phil@nwl.cc>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>

...

This commit is contained in:

Phil Sutter 2021-11-03 19:53:43 +01:00 • committed by Pablo Neira Ayuso

parent e1f8bc06e4

commit 85c0c8b342

1 changed files with 1 additions and 2 deletions

Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL

Download patch file Download diff file Expand all files Collapse all files

3

tools/testing/selftests/netfilter/nft_nat.sh

View file