system/freebsd-src
system/freebsd-src
1
0
Fork 0
mirror of https://github.com/freebsd/freebsd-src synced 2024-10-04 23:50:27 +00:00
Code Issues Packages Projects Releases Wiki Activity
freebsd-src/tests/sys/netpfil/pf/Makefile

31 lines
463 B
Makefile
Raw Normal View History

pf: Basic automated test using VIMAGE If VIMAGE is present we can start jails with their own pf instance. This makes it fairly easy to run tests. For example, this basic test verifies that drop/pass and icmp classification works. It's a basic sanity test for pf, and hopefully an example on how to write more pf tests. The tests are skipped if VIMAGE is not enabled. This work is inspired by the GSoC work of Panagiotes Mousikides. Differential Revision: https://reviews.freebsd.org/D12580
2017-10-06 20:43:14 +00:00
# $FreeBSD$
PACKAGE= tests
TESTSDIR= ${TESTSBASE}/sys/netpfil/pf
pf tests: Basic ioctl validation tests Validate the DIOCRADDTABLES and DIOCRDELTABLES ioctls with invalid size values. All of these requests should fail. MFC after: 1 week
2018-04-06 15:03:48 +00:00
TESTS_SUBDIRS+= ioctl
pf: Basic automated test using VIMAGE If VIMAGE is present we can start jails with their own pf instance. This makes it fairly easy to run tests. For example, this basic test verifies that drop/pass and icmp classification works. It's a basic sanity test for pf, and hopefully an example on how to write more pf tests. The tests are skipped if VIMAGE is not enabled. This work is inspired by the GSoC work of Panagiotes Mousikides. Differential Revision: https://reviews.freebsd.org/D12580
2017-10-06 20:43:14 +00:00
pf tests: Test PR 183198 Create a table which is only used inside an anchor, ensure that the table exists. PR: 183198 MFC after: 2 weeks
2018-11-08 21:56:06 +00:00
ATF_TESTS_SH+= anchor \
pass_block \
pf: test set-tos Introduce tests for the set-tos feature of pf. Teach pft_ping.py to send and verify ToS flags.
2017-10-16 15:01:49 +00:00
forward \
pf tests: Fragmentation (v6) test Test fragmentation handling (i.e. scrub fragment reassemble) code for IPv6. Two simple tests: Ping a host (jail) and test forwarding of fragmented packets.
2017-10-26 20:54:52 +00:00
fragmentation \
pf tests: Test name handling Provoke a situation where two interfaces have the same name, and verify pf's reaction to this.
2018-12-01 09:59:32 +00:00
names \
pf tests: NAT exhaustion test It's been reported that pf doesn't handle running out of available ports for NAT correctly. It freezes until a state expires and it can find a free port. Test for this, by setting up a situation where only two ports are available for NAT and then attempting to create three connections. If successful the third connection will fail immediately. In an incorrect case the connection attempt will freeze, also freezing all interaction with pf through pfctl and trigger timeout. PR: 233867 MFC after: 2 weeks
2018-12-12 20:19:18 +00:00
nat \
pf tests: Basic route-to tests Very basic route-to tests. These tests attempt to provoke PR 228782 for IPv4 and IPv6. A test failure will panic the machine.
2018-06-09 14:21:07 +00:00
set_tos \
pf tests: Basic rdr test MFC after: 2 weeks
2018-12-12 20:19:56 +00:00
rdr \
pf tests: Basic synproxy test A very basic syncproxy test: set up a connection via a synproxy rule. This triggeres the panic fixed in r336273.
2018-07-14 21:32:32 +00:00
route_to \
pf tests: Basic test for 'set skip in $groupname' This tests for the problem reported in PR 229241, where using a group name in 'set skip on' did not work as expected. Sponsored by: Essen Hackathon
2018-08-11 16:41:07 +00:00
synproxy \
pf tests: Basic pfsync test Set up two jails, configure pfsync between them and create state in one of them, verify that this state is copied to the other jail. MFC after: 2 weeks Sponsored by: Orange Business Services Differential Revision: https://reviews.freebsd.org/D17504
2018-11-02 16:59:55 +00:00
set_skip \
pfsync
pf: Basic automated test using VIMAGE If VIMAGE is present we can start jails with their own pf instance. This makes it fairly easy to run tests. For example, this basic test verifies that drop/pass and icmp classification works. It's a basic sanity test for pf, and hopefully an example on how to write more pf tests. The tests are skipped if VIMAGE is not enabled. This work is inspired by the GSoC work of Panagiotes Mousikides. Differential Revision: https://reviews.freebsd.org/D12580
2017-10-06 20:43:14 +00:00
pf: Very basic forwarding test This test illustrates the use of scapy to test pf. Differential Revision: https://reviews.freebsd.org/D12581
2017-10-06 20:51:32 +00:00
${PACKAGE}FILES+= utils.subr \
pf tests: Basic synproxy test A very basic syncproxy test: set up a connection via a synproxy rule. This triggeres the panic fixed in r336273.
2018-07-14 21:32:32 +00:00
echo_inetd.conf \
pf tests: Move Sniffer to its own file Make it easier to re-use the sniffer class in other test support scripts.
2019-03-21 08:15:46 +00:00
sniffer.py \
pf tests: Test CVE-2019-5597 Generate a fragmented packet with different header chains, to provoke the incorrect behaviour of pf. Without the fix this will trigger a panic. Obtained from: Corentin Bayet, Nicolas Collignon, Luca Moro at Synacktiv
2019-03-01 07:39:55 +00:00
pft_ping.py \
CVE-2019-5597.py
pf: Very basic forwarding test This test illustrates the use of scapy to test pf. Differential Revision: https://reviews.freebsd.org/D12581
2017-10-06 20:51:32 +00:00
${PACKAGE}FILESMODE_pft_ping.py= 0555
pf tests: Test CVE-2019-5597 Generate a fragmented packet with different header chains, to provoke the incorrect behaviour of pf. Without the fix this will trigger a panic. Obtained from: Corentin Bayet, Nicolas Collignon, Luca Moro at Synacktiv
2019-03-01 07:39:55 +00:00
${PACKAGE}FILESMODE_CVE-2019-5597.py= 0555
pf: Basic automated test using VIMAGE If VIMAGE is present we can start jails with their own pf instance. This makes it fairly easy to run tests. For example, this basic test verifies that drop/pass and icmp classification works. It's a basic sanity test for pf, and hopefully an example on how to write more pf tests. The tests are skipped if VIMAGE is not enabled. This work is inspired by the GSoC work of Panagiotes Mousikides. Differential Revision: https://reviews.freebsd.org/D12580
2017-10-06 20:43:14 +00:00
.include <bsd.test.mk>
Reference in a new issue Copy permalink