peter/infix
1
0
Fork 0
mirror of https://github.com/kernelkit/infix.git synced 2026-08-02 05:43:02 +02:00
Code Issues Packages Projects Releases Wiki Activity

test: firewall: Make tests more robust

Browse Source
This commit is contained in:
Mattias Walström
2026-06-19 11:38:08 +02:00
parent c9835dfc4a
commit b491820155
1 changed files with 2 additions and 8 deletions
Download Patch File Download Diff File Expand all files Collapse all files
test/case/firewall/wan-dmz-lan/test.py
+2 -8
View File
@@ -148,37 +148,31 @@ with infamy.Test() as test:
fw = data["firewall"]
zones = {z["name"]: z for z in fw["zone"]}
# Verify WAN zone with port forwarding
wan_zone = zones["wan"]
assert wan_zone["action"] == "drop"
assert wan_if in wan_zone["interface"]
assert len(wan_zone["port-forward"]) == 1
pf = next(iter(wan_zone["port-forward"]))
assert pf["lower"] == 8080
assert int(pf["lower"]) == 8080
assert pf["to"]["addr"] == DMZ_SERVER_IP
assert pf["to"]["port"] == 80
assert int(pf["to"]["port"]) == 80
# Verify DMZ zone
dmz_zone = zones["dmz"]
assert dmz_zone["action"] == "reject"
assert DMZ_NET in dmz_zone["network"]
assert "http" in dmz_zone["service"]
# Verify LAN zone
lan_zone = zones["lan"]
assert lan_zone["action"] == "accept"
assert lan_if in lan_zone["interface"]
# Check policies
policies = {p["name"]: p for p in fw["policy"]}
# Verify loc-to-wan policy
loc_wan_policy = policies["loc-to-wan"]
assert set(loc_wan_policy["ingress"]) == {"lan", "dmz"}
assert loc_wan_policy["egress"] == ["wan"]
assert loc_wan_policy["masquerade"] is True
# Verify lan-to-dmz policy
lan_dmz_policy = policies["lan-to-dmz"]
assert lan_dmz_policy["ingress"] == ["lan"]
assert lan_dmz_policy["egress"] == ["dmz"]