예제 #1
0
def test_insert_rule(mock_Table, mock_Chain):
    iptables.insert_rule("PAASTA.service", EMPTY_RULE._replace(target="DROP"))

    call, = mock_Chain("filter", "PAASTA.service").insert_rule.call_args_list
    args, kwargs = call
    rule, = args
    assert iptables.Rule.from_iptc(rule) == EMPTY_RULE._replace(target="DROP")
예제 #2
0
def prepare_new_container(soa_dir, synapse_service_dir, service, instance, mac):
    """Update iptables to include rules for a new (not yet running) MAC address
    """
    ensure_shared_chains()  # probably already set, but just to be safe
    service_group = ServiceGroup(service, instance)
    service_group.update_rules(soa_dir, synapse_service_dir)
    iptables.insert_rule("PAASTA", dispatch_rule(service_group.chain_name, mac))
예제 #3
0
def test_insert_rule(mock_Table, mock_Chain):
    iptables.insert_rule(
        'PAASTA.service', EMPTY_RULE._replace(target='DROP'),
    )

    call, = mock_Chain('filter', 'PAASTA.service').insert_rule.call_args_list
    args, kwargs = call
    rule, = args
    assert iptables.Rule.from_iptc(rule) == EMPTY_RULE._replace(target='DROP')