/test/cookbooks/iptables_ng_test/files/default/tests/minitest/lwrp_chain_create_custom_test.rb
Ruby | 22 lines | 17 code | 5 blank | 0 comment | 2 complexity | f00ba3e2556081b96daccddf10b8c0b9 MD5 | raw file
- require File.expand_path('../support/helpers', __FILE__)
- describe 'iptables-ng::lwrp_chaincreate_custom' do
- include Helpers::TestHelpers
- it 'should set default mangle FORARD policy to DROP' do
- file('/etc/iptables.d/mangle/FORWARD/default').must_include('DROP [0:0]')
- end
- it 'should enable iptables serices' do
- service(node['iptables-ng']['service_ipv4']).must_be_enabled if node['iptables-ng']['service_ipv4']
- service(node['iptables-ng']['service_ipv6']).must_be_enabled if node['iptables-ng']['service_ipv6']
- end
- it 'should apply the specified iptables rules' do
- ipv4 = shell_out('iptables -t mangle -L -n')
- ipv4.stdout.must_include('Chain FORWARD (policy DROP)')
- ipv6 = shell_out('ip6tables -t mangle -L -n')
- ipv6.stdout.must_include('Chain FORWARD (policy DROP)')
- end
- end