def test_denies_ace_transport(self):
acl = Acl()
ace = Ace(transport=22)
acl.add(ace)
assert_false(acl.denies(ace))
assert_false(acl.denies(Ace(transport='tcp 22')))
assert_false(acl.denies(Ace(transport='udp 22')))
def test_denies_acl_transport_udp(self):
acl01 = Acl()
acl02 = Acl()
acl01.add(Ace(transport='udp 22'))
acl02.add(Ace(transport='udp 1-22'))
assert_false(acl02.denies(acl01))
assert_true(acl01.denies(acl02))
def test_default_denies_transport(self):
acl01 = Acl()
acl02 = Acl()
acl01.add(Ace(transport='22'))
acl02.add(Ace(transport='1-22'))
assert_true(acl01.denies(acl02))
acl01.default_permit = True
assert_false(acl01.denies(acl02))
def test_default_denies_network(self):
acl01 = Acl()
acl02 = Acl()
acl02.add(Ace(network='1.2.3.4/24 4.5.6.7/24'))
acl01.add(Ace(network='8.2.3.4 4.5.6.7'))
assert_true(acl02.denies(acl01))
acl01.default_permit = True
assert_false(acl01.denies(acl02))
def test_denies_ace_default_permit(self):
acl = Acl(default_permit=True)
assert_false(acl.denies(Ace()))
acl.add(Ace(network='1.2.3.0/24 4.5.6.0/24'))
assert_false(acl.denies(Ace(network='4.5.6.7 1.2.3.4')))
acl.remove(Ace(network='1.2.3.0/24 4.5.6.0/24'))
acl.add(Ace(permit=False, network='1.2.3.0/24 4.5.6.0/24'))
assert_false(acl.denies(Ace(network='1.2.3.4 4.5.6.7')))
def test_denies_acl_transport(self):
acl01 = Acl()
acl02 = Acl()
acl01.add(Ace(transport='22'))
acl02.add(Ace(transport='1-22'))
assert_false(acl02.denies(acl01))
assert_true(acl01.denies(acl02))
acl01.remove(Ace(transport='22'))
acl01.add(Ace(transport='tcp 22'))
acl01.add(Ace(transport='udp 22'))
assert_false(acl02.denies(acl01))
acl01.add(Ace(transport='tcp 23'))
assert_true(acl02.denies(acl01))
def test_denies_acl(self):
acl01 = Acl()
acl02 = Acl()
assert_true(acl01.denies(acl02))
assert_true(acl02.denies(acl01))
def test_denies_ace_networks(self):
acl = Acl()
acl.add(Ace(network='1.2.3.0/24 4.5.6.0/24'))
assert_false(acl.denies(Ace(network='1.2.3.4 4.5.6.7')))
def test_denies_ace(self):
acl = Acl()
assert_true(acl.denies(Ace()))
acl.add(Ace())
assert_false(acl.denies(Ace()))
acl.remove(Ace())