diff mbox series

[iptables] extensions: recent: New kernels support 999 hits

Message ID 20240720002627.14556-1-phil@nwl.cc
State Accepted
Headers show
Series [iptables] extensions: recent: New kernels support 999 hits | expand

Commit Message

Phil Sutter July 20, 2024, 12:26 a.m. UTC 
Since kernel commit f4ebd03496f6 ("netfilter: xt_recent: Lift
restrictions on max hitcount value"), the max supported hitcount value
has increased significantly. Adjust the test to use a value which fails
on old as well as new kernels.

Signed-off-by: Phil Sutter <phil@nwl.cc>
---
 extensions/libxt_recent.t | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

Comments

Phil Sutter July 27, 2024, 12:34 p.m. UTC | #1 
On Sat, Jul 20, 2024 at 02:26:27AM +0200, Phil Sutter wrote:
> Since kernel commit f4ebd03496f6 ("netfilter: xt_recent: Lift
> restrictions on max hitcount value"), the max supported hitcount value
> has increased significantly. Adjust the test to use a value which fails
> on old as well as new kernels.
> 
> Signed-off-by: Phil Sutter <phil@nwl.cc>

Also applied.
diff mbox series

Patch

diff --git a/extensions/libxt_recent.t b/extensions/libxt_recent.t
index cf23aabc6e63b..3b0dd9fa29c94 100644
--- a/extensions/libxt_recent.t
+++ b/extensions/libxt_recent.t
@@ -4,7 +4,7 @@ 
 -m recent --rcheck --hitcount 12 --name foo --mask 255.255.255.255 --rsource;=;OK
 -m recent --update --rttl;-m recent --update --rttl --name DEFAULT --mask 255.255.255.255 --rsource;OK
 -m recent --set --rttl;;FAIL
--m recent --rcheck --hitcount 999 --name foo --mask 255.255.255.255 --rsource;;FAIL
+-m recent --rcheck --hitcount 65536 --name foo --mask 255.255.255.255 --rsource;;FAIL
 # nonsensical, but all should load successfully:
 -m recent --rcheck --hitcount 3 --name foo --mask 255.255.255.255 --rsource -m recent --rcheck --hitcount 4 --name foo --mask 255.255.255.255 --rsource;=;OK
 -m recent --rcheck --hitcount 4 --name foo --mask 255.255.255.255 --rsource -m recent --rcheck --hitcount 4 --name foo --mask 255.255.255.255 --rsource;=;OK