mirror of
https://github.com/servalproject/serval-dna.git
synced 2024-12-19 05:07:56 +00:00
112 lines
3.7 KiB
Bash
Executable File
112 lines
3.7 KiB
Bash
Executable File
#!/bin/bash
|
|
|
|
# Tests for MDP.
|
|
#
|
|
# Copyright 2014 Serval Project, Inc.
|
|
#
|
|
# This program is free software; you can redistribute it and/or
|
|
# modify it under the terms of the GNU General Public License
|
|
# as published by the Free Software Foundation; either version 2
|
|
# of the License, or (at your option) any later version.
|
|
#
|
|
# This program is distributed in the hope that it will be useful,
|
|
# but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
# GNU General Public License for more details.
|
|
#
|
|
# You should have received a copy of the GNU General Public License
|
|
# along with this program; if not, write to the Free Software
|
|
# Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA.
|
|
|
|
|
|
source "${0%/*}/../testframework.sh"
|
|
source "${0%/*}/../testdefs.sh"
|
|
|
|
teardown() {
|
|
stop_all_servald_servers
|
|
kill_all_servald_processes
|
|
assert_no_servald_processes
|
|
report_all_servald_servers
|
|
}
|
|
|
|
set_filter_rules_path() {
|
|
>"rules$instance_name"
|
|
executeOk_servald config \
|
|
set log.console.level debug \
|
|
set debug.config yes \
|
|
set debug.mdprequests yes \
|
|
set debug.mdp_filter yes \
|
|
set mdp.filter_rules_path "$PWD/rules$instance_name"
|
|
}
|
|
|
|
setup_mdp_filters_ping() {
|
|
assert_no_servald_processes
|
|
foreach_instance +A +B +C set_filter_rules_path
|
|
foreach_instance +A +B +C create_single_identity
|
|
start_servald_instances +A +B +C
|
|
# Ensure that pings all work.
|
|
set_instance +A
|
|
fork executeOk_servald mdp ping --timeout=10 "$SIDB" 1
|
|
fork executeOk_servald mdp ping --timeout=10 "$SIDC" 1
|
|
set_instance +B
|
|
fork executeOk_servald mdp ping --timeout=10 "$SIDA" 1
|
|
fork executeOk_servald mdp ping --timeout=10 "$SIDC" 1
|
|
set_instance +C
|
|
fork executeOk_servald mdp ping --timeout=10 "$SIDA" 1
|
|
fork executeOk_servald mdp ping --timeout=10 "$SIDB" 1
|
|
fork_wait_all
|
|
}
|
|
|
|
doc_MDPFilterRulesDrop="MDP filter rules drop incoming and outgoing packets"
|
|
setup_MDPFilterRulesDrop() {
|
|
setup_servald
|
|
setup_mdp_filters_ping
|
|
}
|
|
test_MDPFilterRulesDrop() {
|
|
set_instance +A
|
|
# Block pong responses from B to A
|
|
echo "drop <$SIDB:7" >>rulesA
|
|
# Block pong responses from A to C
|
|
echo "drop *:7 >$SIDC" >>rulesA
|
|
tfw_cat rulesA
|
|
executeOk_servald config sync
|
|
fork execute_servald --exit-status=1 mdp ping --timeout=10 "$SIDB" 1
|
|
fork executeOk_servald mdp ping --timeout=10 "$SIDC" 1
|
|
set_instance +B
|
|
fork executeOk_servald mdp ping --timeout=10 "$SIDA" 1
|
|
fork executeOk_servald mdp ping --timeout=10 "$SIDC" 1
|
|
set_instance +C
|
|
fork execute_servald --exit-status=1 mdp ping --timeout=10 "$SIDA" 1
|
|
fork executeOk_servald mdp ping --timeout=10 "$SIDB" 1
|
|
fork_wait_all
|
|
}
|
|
|
|
doc_MDPFilterRulesAllow="MDP filter rules allow incoming and outgoing packets"
|
|
setup_MDPFilterRulesAllow() {
|
|
setup_servald
|
|
setup_mdp_filters_ping
|
|
}
|
|
test_MDPFilterRulesAllow() {
|
|
set_instance +A
|
|
# Allow A to ping B and receive pong from B
|
|
# Allow A to receive ping from B and send pong back (ie, allow B to ping A)
|
|
echo "allow <>$SIDB:7; allow $SIDA:7 <> $SIDB" >>rulesA
|
|
# Allow A to receive ping from C (but not to send pong)
|
|
echo "allow *:7 <$SIDC" >>rulesA
|
|
# All other packets dropped
|
|
echo "drop all" >>rulesA
|
|
tfw_cat rulesA
|
|
executeOk_servald config sync
|
|
fork executeOk_servald mdp ping --timeout=10 "$SIDB" 1
|
|
fork execute_servald --exit-status=1 mdp ping --timeout=10 "$SIDC" 1
|
|
set_instance +B
|
|
fork executeOk_servald mdp ping --timeout=10 "$SIDA" 1
|
|
fork executeOk_servald mdp ping --timeout=10 "$SIDC" 1
|
|
set_instance +C
|
|
fork execute_servald --exit-status=1 mdp ping --timeout=10 "$SIDA" 1
|
|
fork executeOk_servald mdp ping --timeout=10 "$SIDB" 1
|
|
fork_wait_all
|
|
}
|
|
|
|
runTests "$@"
|