denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

testing: Run 'conntrack -F' before all test scenarios

Browse Source 
This prevents failures due to remaining conntrack entries.
This commit is contained in:
Tobias Brunner
2014-04-02 11:55:05 +02:00
parent f678bce84c
commit 7a61bf9032
28 changed files with 14 additions and 41 deletions
Download Patch File Download Diff File Expand all files Collapse all files
testing/tests/ikev2/nat-rw/posttest.dat
-1
View File
@@ -5,4 +5,3 @@ alice::iptables-restore < /etc/iptables.flush
venus::iptables-restore < /etc/iptables.flush
sun::iptables-restore < /etc/iptables.flush
moon::iptables -t nat -F
moon::conntrack -F
testing/tests/ikev2/nat-rw/pretest.dat
+2 -3
View File
@@ -1,14 +1,13 @@
alice::iptables-restore < /etc/iptables.rules
venus::iptables-restore < /etc/iptables.rules
sun::iptables-restore < /etc/iptables.rules
moon::conntrack -F
moon::iptables -t nat -A POSTROUTING -o eth0 -s 10.1.0.0/16 -p udp -j SNAT --to-source PH_IP_MOON:1024-1100
moon::iptables -t nat -A POSTROUTING -o eth0 -s 10.1.0.0/16 -p tcp -j SNAT --to-source PH_IP_MOON:2000-2100
alice::ipsec start
venus::ipsec start
sun::ipsec start
alice::sleep 2
alice::sleep 2
alice::ipsec up nat-t
venus::sleep 2
venus::sleep 2
venus::ipsec up nat-t
venus::sleep 2