system/freebsd-src
system/freebsd-src
1
0
Fork 0
mirror of https://github.com/freebsd/freebsd-src synced 2024-10-04 23:50:27 +00:00
Code Issues Packages Projects Releases Wiki Activity
freebsd-src/tests/sys/netpfil/pf/Makefile

35 lines
512 B
Makefile
Raw Normal View History

pf: Basic automated test using VIMAGE If VIMAGE is present we can start jails with their own pf instance. This makes it fairly easy to run tests. For example, this basic test verifies that drop/pass and icmp classification works. It's a basic sanity test for pf, and hopefully an example on how to write more pf tests. The tests are skipped if VIMAGE is not enabled. This work is inspired by the GSoC work of Panagiotes Mousikides. Differential Revision: https://reviews.freebsd.org/D12580
2017-10-06 20:43:14 +00:00
# $FreeBSD$
PACKAGE= tests
TESTSDIR= ${TESTSBASE}/sys/netpfil/pf
pf tests: Basic ioctl validation tests Validate the DIOCRADDTABLES and DIOCRDELTABLES ioctls with invalid size values. All of these requests should fail. MFC after: 1 week
2018-04-06 15:03:48 +00:00
TESTS_SUBDIRS+= ioctl
pf: Basic automated test using VIMAGE If VIMAGE is present we can start jails with their own pf instance. This makes it fairly easy to run tests. For example, this basic test verifies that drop/pass and icmp classification works. It's a basic sanity test for pf, and hopefully an example on how to write more pf tests. The tests are skipped if VIMAGE is not enabled. This work is inspired by the GSoC work of Panagiotes Mousikides. Differential Revision: https://reviews.freebsd.org/D12580
2017-10-06 20:43:14 +00:00
altq tests: Basic ALTQ test Activate ALTQ_HFSC, crudely check if it really limits bandwidth as we'd expect. Reviewed by: donner@ Differential Revision: https://reviews.freebsd.org/D28303
2021-01-23 09:37:03 +00:00
ATF_TESTS_SH+= altq \
anchor \
pf tests: Verify (tcp) checksum modification on unaligned options It turns out pf incorrectly updates the TCP checksum if the TCP option we're modifying is not 2-byte algined with respect to the start of the packet. Create a TCP packet with such an option and throw it through a scrub rule, which will update timestamps and modify the packet. PR: 240416 MFC after: 1 week Differential revision: https://reviews.freebsd.org/D27688
2020-12-19 15:06:03 +00:00
checksum \
pf: test set-tos Introduce tests for the set-tos feature of pf. Teach pft_ping.py to send and verify ToS flags.
2017-10-16 15:01:49 +00:00
forward \
pf tests: Fragmentation (v6) test Test fragmentation handling (i.e. scrub fragment reassemble) code for IPv6. Two simple tests: Ping a host (jail) and test forwarding of fragmented packets.
2017-10-26 20:54:52 +00:00
fragmentation \
pf tests: Sort Makefile entries MFC after: 1 week
2020-12-19 14:27:33 +00:00
icmp \
pf tests: Test name handling Provoke a situation where two interfaces have the same name, and verify pf's reaction to this.
2018-12-01 09:59:32 +00:00
names \
pf tests: NAT exhaustion test It's been reported that pf doesn't handle running out of available ports for NAT correctly. It freezes until a state expires and it can find a free port. Test for this, by setting up a situation where only two ports are available for NAT and then attempting to create three connections. If successful the third connection will fail immediately. In an incorrect case the connection attempt will freeze, also freezing all interaction with pf through pfctl and trigger timeout. PR: 233867 MFC after: 2 weeks
2018-12-12 20:19:18 +00:00
nat \
pf tests: Sort Makefile entries MFC after: 1 week
2020-12-19 14:27:33 +00:00
pass_block \
pfsync \
pf tests: Basic rdr test MFC after: 2 weeks
2018-12-12 20:19:56 +00:00
rdr \
pf tests: Basic synproxy test A very basic syncproxy test: set up a connection via a synproxy rule. This triggeres the panic fixed in r336273.
2018-07-14 21:32:32 +00:00
route_to \
pf tests: Basic pfsync test Set up two jails, configure pfsync between them and create state in one of them, verify that this state is copied to the other jail. MFC after: 2 weeks Sponsored by: Orange Business Services Differential Revision: https://reviews.freebsd.org/D17504
2018-11-02 16:59:55 +00:00
set_skip \
pf tests: Sort Makefile entries MFC after: 1 week
2020-12-19 14:27:33 +00:00
set_tos \
src_track \
synproxy \
table
pf: Basic automated test using VIMAGE If VIMAGE is present we can start jails with their own pf instance. This makes it fairly easy to run tests. For example, this basic test verifies that drop/pass and icmp classification works. It's a basic sanity test for pf, and hopefully an example on how to write more pf tests. The tests are skipped if VIMAGE is not enabled. This work is inspired by the GSoC work of Panagiotes Mousikides. Differential Revision: https://reviews.freebsd.org/D12580
2017-10-06 20:43:14 +00:00
pf tests: Sort Makefile entries MFC after: 1 week
2020-12-19 14:27:33 +00:00
${PACKAGE}FILES+= CVE-2019-5597.py \
CVE-2019-5598.py \
pf tests: Basic synproxy test A very basic syncproxy test: set up a connection via a synproxy rule. This triggeres the panic fixed in r336273.
2018-07-14 21:32:32 +00:00
echo_inetd.conf \
pf tests: Sort Makefile entries MFC after: 1 week
2020-12-19 14:27:33 +00:00
utils.subr
pf: Very basic forwarding test This test illustrates the use of scapy to test pf. Differential Revision: https://reviews.freebsd.org/D12581
2017-10-06 20:51:32 +00:00
pf tests: Test CVE-2019-5597 Generate a fragmented packet with different header chains, to provoke the incorrect behaviour of pf. Without the fix this will trigger a panic. Obtained from: Corentin Bayet, Nicolas Collignon, Luca Moro at Synacktiv
2019-03-01 07:39:55 +00:00
${PACKAGE}FILESMODE_CVE-2019-5597.py= 0555
pf tests: Test CVE-2019-5598 Verify that pf correctly drops inconsistent ICMP packets (i.e. where the IP src/dst do not match the IP src/dst in the ICMP packet.
2019-03-22 07:39:28 +00:00
${PACKAGE}FILESMODE_CVE-2019-5598.py= 0555
pf: Basic automated test using VIMAGE If VIMAGE is present we can start jails with their own pf instance. This makes it fairly easy to run tests. For example, this basic test verifies that drop/pass and icmp classification works. It's a basic sanity test for pf, and hopefully an example on how to write more pf tests. The tests are skipped if VIMAGE is not enabled. This work is inspired by the GSoC work of Panagiotes Mousikides. Differential Revision: https://reviews.freebsd.org/D12580
2017-10-06 20:43:14 +00:00
.include <bsd.test.mk>
Reference in a new issue Copy permalink