mirror of
https://github.com/qdm12/gluetun.git
synced 2026-05-07 04:20:12 +02:00
Quentin McGaw
2438fc2c3a
- firewall log level is still fully controlled by `LOG_LEVEL` - iptables log level defaults to `info` even if global log level is `debug` to minimize the amount of debug logs - iptables log level is only set to debug if retro-compatible `FIREWALL_DEBUG=on` or if `FIREWALL_IPTABLES_LOG_LEVEL=debug`
80 lines
1.8 KiB
Go
80 lines
1.8 KiB
Go
package settings
|
|
|
|
import (
|
|
"net/netip"
|
|
"testing"
|
|
|
|
"github.com/qdm12/log"
|
|
"github.com/stretchr/testify/assert"
|
|
)
|
|
|
|
func Test_Firewall_validate(t *testing.T) {
|
|
t.Parallel()
|
|
|
|
testCases := map[string]struct {
|
|
firewall Firewall
|
|
errWrapped error
|
|
errMessage string
|
|
}{
|
|
"empty": {
|
|
errWrapped: log.ErrLevelNotRecognized,
|
|
errMessage: "iptables settings: log level: level is not recognized: ",
|
|
},
|
|
"zero_vpn_input_port": {
|
|
firewall: Firewall{
|
|
VPNInputPorts: []uint16{0},
|
|
},
|
|
errWrapped: ErrFirewallZeroPort,
|
|
errMessage: "VPN input ports: cannot have a zero port",
|
|
},
|
|
"zero_input_port": {
|
|
firewall: Firewall{
|
|
InputPorts: []uint16{0},
|
|
},
|
|
errWrapped: ErrFirewallZeroPort,
|
|
errMessage: "input ports: cannot have a zero port",
|
|
},
|
|
"unspecified_outbound_subnet": {
|
|
firewall: Firewall{
|
|
OutboundSubnets: []netip.Prefix{
|
|
netip.MustParsePrefix("0.0.0.0/0"),
|
|
},
|
|
},
|
|
errWrapped: ErrFirewallPublicOutboundSubnet,
|
|
errMessage: "outbound subnet has an unspecified address: 0.0.0.0/0",
|
|
},
|
|
"public_outbound_subnet": {
|
|
firewall: Firewall{
|
|
Iptables: Iptables{LogLevel: log.LevelInfo.String()},
|
|
OutboundSubnets: []netip.Prefix{
|
|
netip.MustParsePrefix("1.2.3.4/32"),
|
|
},
|
|
},
|
|
},
|
|
"valid_settings": {
|
|
firewall: Firewall{
|
|
Iptables: Iptables{LogLevel: log.LevelInfo.String()},
|
|
VPNInputPorts: []uint16{100, 101},
|
|
InputPorts: []uint16{200, 201},
|
|
OutboundSubnets: []netip.Prefix{
|
|
netip.MustParsePrefix("192.168.1.0/24"),
|
|
netip.MustParsePrefix("10.10.1.1/32"),
|
|
},
|
|
},
|
|
},
|
|
}
|
|
|
|
for name, testCase := range testCases {
|
|
t.Run(name, func(t *testing.T) {
|
|
t.Parallel()
|
|
|
|
err := testCase.firewall.validate()
|
|
|
|
assert.ErrorIs(t, err, testCase.errWrapped)
|
|
if testCase.errWrapped != nil {
|
|
assert.EqualError(t, err, testCase.errMessage)
|
|
}
|
|
})
|
|
}
|
|
}
|