It might be convenient to run tests from a development branch that resides on another host, and if we break connectivity on the test host as tests are executed, we con't run them this way. To preserve connectivity, for shell tests, we can simply use the 'forward' hook instead of 'input' in chains/0036_policy_variable_0 and transactions/0011_chain_0, without affecting test coverage. For py tests, this is more complicated as some test cases install chains for all the available hooks, and we would probably need a more refined approach to avoid dropping relevant traffic, so I'm not covering that right now. Signed-off-by: Stefano Brivio <sbrivio@xxxxxxxxxx> --- tests/shell/testcases/chains/0036policy_variable_0 | 2 +- tests/shell/testcases/transactions/0011chain_0 | 2 +- tests/shell/testcases/transactions/dumps/0011chain_0.nft | 2 +- 3 files changed, 3 insertions(+), 3 deletions(-) diff --git a/tests/shell/testcases/chains/0036policy_variable_0 b/tests/shell/testcases/chains/0036policy_variable_0 index d4d98ede0d8d..e9246dd9e974 100755 --- a/tests/shell/testcases/chains/0036policy_variable_0 +++ b/tests/shell/testcases/chains/0036policy_variable_0 @@ -9,7 +9,7 @@ define default_policy = \"drop\" table inet global { chain prerouting { - type filter hook prerouting priority filter + type filter hook forward priority filter policy \$default_policy } }" diff --git a/tests/shell/testcases/transactions/0011chain_0 b/tests/shell/testcases/transactions/0011chain_0 index 3bed16dddf40..bdfa14975180 100755 --- a/tests/shell/testcases/transactions/0011chain_0 +++ b/tests/shell/testcases/transactions/0011chain_0 @@ -5,7 +5,7 @@ set -e RULESET="add table x add chain x y delete chain x y -add chain x y { type filter hook input priority 0; } +add chain x y { type filter hook forward priority 0; } add chain x y { policy drop; }" $NFT -f - <<< "$RULESET" diff --git a/tests/shell/testcases/transactions/dumps/0011chain_0.nft b/tests/shell/testcases/transactions/dumps/0011chain_0.nft index df88ad47c5d9..a12726069efc 100644 --- a/tests/shell/testcases/transactions/dumps/0011chain_0.nft +++ b/tests/shell/testcases/transactions/dumps/0011chain_0.nft @@ -1,5 +1,5 @@ table ip x { chain y { - type filter hook input priority filter; policy drop; + type filter hook forward priority filter; policy drop; } } -- 2.26.2