def test_reorder_chain_already_in_order(self):
self.chain_mock.return_value.rules = [
self.FakeRule("ACCEPT", "c"),
self.FakeRule("ACCEPT", "d"),
self.FakeRule("LOG", "b"),
self.FakeRule("REJECT", "a"),
]
iptables.reorder_chain("")
assert self.chain_mock.return_value.replace_rule.mock_calls == []
def test_reorder_chain_already_in_order(self):
self.chain_mock.return_value.rules = [
self.FakeRule('ACCEPT', 'c'),
self.FakeRule('ACCEPT', 'd'),
self.FakeRule('LOG', 'b'),
self.FakeRule('REJECT', 'a'),
]
iptables.reorder_chain('')
assert self.chain_mock.return_value.replace_rule.mock_calls == []
def test_reorder_chain_other_target_names(self):
self.list_chain_mock.return_value = [
self.FakeRule('HELLOWORLD', 'c'),
self.FakeRule('REJECT', 'a'),
self.FakeRule('FOOBAR', 'd'),
]
iptables.reorder_chain('')
assert self.chain_mock.return_value.replace_rule.mock_calls == [
mock.call(self.FakeRule('FOOBAR', 'd'), 1),
mock.call(self.FakeRule('REJECT', 'a'), 2),
]
def test_reorder_chain_reject_in_middle(self):
self.list_chain_mock.return_value = [
self.FakeRule('ACCEPT', 'c'),
self.FakeRule('REJECT', 'a'),
self.FakeRule('ACCEPT', 'd'),
]
iptables.reorder_chain('')
assert self.chain_mock.return_value.replace_rule.mock_calls == [
mock.call(self.FakeRule('ACCEPT', 'd'), 1),
mock.call(self.FakeRule('REJECT', 'a'), 2),
]
def test_reorder_chain_other_target_names(self):
self.list_chain_mock.return_value = [
self.FakeRule("HELLOWORLD", "c"),
self.FakeRule("REJECT", "a"),
self.FakeRule("FOOBAR", "d"),
]
iptables.reorder_chain("")
assert self.chain_mock.return_value.replace_rule.mock_calls == [
mock.call(self.FakeRule("FOOBAR", "d"), 1),
mock.call(self.FakeRule("REJECT", "a"), 2),
]
def test_reorder_chain_reject_in_middle(self):
self.list_chain_mock.return_value = [
self.FakeRule("ACCEPT", "c"),
self.FakeRule("REJECT", "a"),
self.FakeRule("ACCEPT", "d"),
]
iptables.reorder_chain("")
assert self.chain_mock.return_value.replace_rule.mock_calls == [
mock.call(self.FakeRule("ACCEPT", "d"), 1),
mock.call(self.FakeRule("REJECT", "a"), 2),
]
def test_reorder_chain_log_at_bottom(self):
self.list_chain_mock.return_value = [
self.FakeRule('ACCEPT', 'c'),
self.FakeRule('ACCEPT', 'd'),
self.FakeRule('REJECT', 'a'),
self.FakeRule('LOG', 'b'),
]
iptables.reorder_chain('')
assert self.chain_mock.return_value.replace_rule.mock_calls == [
mock.call(self.FakeRule('LOG', 'b'), 2),
mock.call(self.FakeRule('REJECT', 'a'), 3),
]
def test_reorder_chain_log_at_bottom(self):
self.list_chain_mock.return_value = [
self.FakeRule("ACCEPT", "c"),
self.FakeRule("ACCEPT", "d"),
self.FakeRule("REJECT", "a"),
self.FakeRule("LOG", "b"),
]
iptables.reorder_chain("")
assert self.chain_mock.return_value.replace_rule.mock_calls == [
mock.call(self.FakeRule("LOG", "b"), 2),
mock.call(self.FakeRule("REJECT", "a"), 3),
]
def test_reorder_chain_empty(self):
self.list_chain_mock.return_value = []
iptables.reorder_chain('')
assert self.chain_mock.return_value.replace_rule.mock_calls == []
def update_rules(self, soa_dir, synapse_service_dir):
iptables.ensure_chain(self.chain_name,
self.get_rules(soa_dir, synapse_service_dir))
iptables.reorder_chain(self.chain_name)
