xref: /freebsd/tests/sys/netpfil/pf/modulate.sh (revision 22cf89c938886d14f5796fc49f9f020c23ea8eaf)
1#
2# SPDX-License-Identifier: BSD-2-Clause
3#
4# Copyright (c) 2023 Kajetan Staszkiewicz <vegetga@tuxpowered.net>
5#
6# Redistribution and use in source and binary forms, with or without
7# modification, are permitted provided that the following conditions
8# are met:
9# 1. Redistributions of source code must retain the above copyright
10#    notice, this list of conditions and the following disclaimer.
11# 2. Redistributions in binary form must reproduce the above copyright
12#    notice, this list of conditions and the following disclaimer in the
13#    documentation and/or other materials provided with the distribution.
14#
15# THIS SOFTWARE IS PROVIDED BY THE AUTHOR AND CONTRIBUTORS ``AS IS'' AND
16# ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
17# IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
18# ARE DISCLAIMED.  IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE
19# FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
20# DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
21# OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
22# HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
23# LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
24# OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
25# SUCH DAMAGE.
26
27. $(atf_get_srcdir)/utils.subr
28
29atf_test_case "modulate_v4" "cleanup"
30modulate_v4_head()
31{
32	atf_set descr 'IPv4 TCP sequence number modulation'
33	atf_set require.user root
34	atf_set require.progs scapy
35}
36
37modulate_v4_body()
38{
39	setup_router_dummy_ipv4
40
41	pft_set_rules router \
42		"pass in on ${epair_tester}b modulate state"
43	ping_dummy_check_request exit:0 --ping-type=tcpsyn --send-seq 42 # Sanity check
44	ping_dummy_check_request exit:1 --ping-type=tcpsyn --send-seq 42 --expect-seq 42
45}
46
47modulate_v4_cleanup()
48{
49	pft_cleanup
50}
51
52atf_test_case "modulate_v6" "cleanup"
53modulate_v6_head()
54{
55	atf_set descr 'IPv6 TCP sequence number modulation'
56	atf_set require.user root
57	atf_set require.progs scapy
58}
59
60modulate_v6_body()
61{
62	setup_router_dummy_ipv6
63
64	pft_set_rules router \
65		"pass in on ${epair_tester}b modulate state"
66	ping_dummy_check_request exit:0 --ping-type=tcpsyn --send-seq 42 # Sanity check
67	ping_dummy_check_request exit:1 --ping-type=tcpsyn --send-seq 42 --expect-seq 42
68}
69
70modulate_v6_cleanup()
71{
72	pft_cleanup
73}
74
75atf_init_test_cases()
76{
77	atf_add_test_case "modulate_v4"
78	atf_add_test_case "modulate_v6"
79}
80