Hi Jeremy, On Sat, Feb 12, 2022 at 04:58:30PM +0000, Jeremy Sowden wrote: > Currently, there are two supported test results: `OK` and `FAIL`. It is > expected that either the iptables command fails, or it succeeds and > dumping the rule has the correct output. However, it is possible that > the command may succeed but the output may not be correct. Add a > `NOMATCH` result to cover this outcome. Hmm. Wouldn't it make sense to extend the scope of LEGACY/NFT keywords to output checks as well instead of introducing a new one? I think we could cover expected output that way by duplicating the test case with different expected output instead of marking it as unspecific "may produce garbage". Cheers, Phil