Пример #1
0
    def test_repeating_requests( self ):
 
        # In this test, we will verify that the same request & response work if repeated
        # Expected:  question and answer allowed both times
 
        ques = self.fake_question()
        ans  = self.fake_answer( ques )
 
        # First send the request.
        d_ques = dns.dns()
        d_ques.id = self.fake_transaction_id()
        d_ques.questions.append( ques )
        kv1_ques = { "raw": self.serialize_dns( d_ques ) }
 
        d_ans = dns.dns()
        d_ans.qr = True
        d_ans.id = d_ques.id
        d_ans.questions.append( ques )
        d_ans.answers.append( ans )
        kv1_ans = { "raw": self.serialize_dns( d_ans ) }
 
        #
        # send the and the response for try 1
        #
        self.assertTrue( dns_firewall.dns_firewall( kv1_ques ) is not None )
        self.assertTrue( dns_firewall.dns_firewall( kv1_ans ) is not None )
 
        #
        # now for the second time
        #
        self.assertTrue( dns_firewall.dns_firewall( kv1_ques ) is not None )
        self.assertTrue( dns_firewall.dns_firewall( kv1_ans ) is not None )
Пример #2
0
    def test_valid_response( self ):
 
        # In this test, we will first send a DNS question once,
        # then send its answer twice.
        # Expected:  question and first answer allowed, second answer rejected.
 
        ques = self.fake_question()
        ans  = self.fake_answer( ques )
 
        # First send the request.
        d_ques = dns.dns()
        d_ques.id = self.fake_transaction_id()
        d_ques.questions.append( ques )
        kv_ques = { "raw": self.serialize_dns( d_ques ) }
 
        dns_firewall.dns_firewall( kv_ques )
 
        d_ans = dns.dns()
        d_ans.qr = True
        d_ans.id = d_ques.id
        d_ans.questions.append( ques )
        d_ans.answers.append( ans )
        kv_ans = { "raw": self.serialize_dns( d_ans ) }
 
        # Allow the response to go through once.
        self.assertTrue( dns_firewall.dns_firewall( kv_ans ) is not None )
 
        # Do not allow the response to go through a second time.
        self.assertTrue( dns_firewall.dns_firewall( kv_ans ) is None )
Пример #3
0
    def test_valid_response( self ):

        # In this test, we will first send a DNS question once,
        # then send its answer twice.
        # Expected:  question and first answer allowed, second answer rejected.

        ques = self.fake_question()
        ans  = self.fake_answer( ques )

        # First send the request.
        d_ques = dns.dns()
        d_ques.id = self.fake_transaction_id()
        d_ques.questions.append( ques )
        kv_ques = { "raw": self.serialize_dns( d_ques ) }

        dns_firewall.dns_firewall( kv_ques )

        d_ans = dns.dns()
        d_ans.qr = True
        d_ans.id = d_ques.id
        d_ans.questions.append( ques )
        d_ans.answers.append( ans )
        kv_ans = { "raw": self.serialize_dns( d_ans ) }

        # Allow the response to go through once.
        self.assertTrue( dns_firewall.dns_firewall( kv_ans ) is not None )

        # Do not allow the response to go through a second time.
        self.assertTrue( dns_firewall.dns_firewall( kv_ans ) is None )
Пример #4
0
    def test_repeating_requests( self ):

        # In this test, we will verify that the same request & response work if repeated
        # Expected:  question and answer allowed both times

        ques = self.fake_question()
        ans  = self.fake_answer( ques )

        # First send the request.
        d_ques = dns.dns()
        d_ques.id = self.fake_transaction_id()
        d_ques.questions.append( ques )
        kv1_ques = { "raw": self.serialize_dns( d_ques ) }

        d_ans = dns.dns()
        d_ans.qr = True
        d_ans.id = d_ques.id
        d_ans.questions.append( ques )
        d_ans.answers.append( ans )
        kv1_ans = { "raw": self.serialize_dns( d_ans ) }

        #
        # send the and the response for try 1
        #
        self.assertTrue( dns_firewall.dns_firewall( kv1_ques ) is not None )
        self.assertTrue( dns_firewall.dns_firewall( kv1_ans ) is not None )

        #
        # now for the second time
        #
        self.assertTrue( dns_firewall.dns_firewall( kv1_ques ) is not None )
        self.assertTrue( dns_firewall.dns_firewall( kv1_ans ) is not None )
Пример #5
0
    def test_overlapping_requests( self ):
 
        # In this test, we will first send two DNS questions, then the DNS responses in 
        # reverse order
        # Expected:  question and answer allowed
 
        ques = self.fake_question()
        ans  = self.fake_answer( ques )
 
        # First send the request.
        d_ques = dns.dns()
        d_ques.id = self.fake_transaction_id()
        d_ques.questions.append( ques )
        kv1_ques = { "raw": self.serialize_dns( d_ques ) }
 
        d_ans = dns.dns()
        d_ans.qr = True
        d_ans.id = d_ques.id
        d_ans.questions.append( ques )
        d_ans.answers.append( ans )
        kv1_ans = { "raw": self.serialize_dns( d_ans ) }
 
        ques = self.fake_question()
        ans  = self.fake_answer( ques )
 
        # First send the request.
        d_ques = dns.dns()
        d_ques.id = self.fake_transaction_id()
        d_ques.questions.append( ques )
        kv2_ques = { "raw": self.serialize_dns( d_ques ) }
 
        d_ans = dns.dns()
        d_ans.qr = True
        d_ans.id = d_ques.id
        d_ans.questions.append( ques )
        d_ans.answers.append( ans )
        kv2_ans = { "raw": self.serialize_dns( d_ans ) }
 
        #
        # send the queries
        #
        self.assertTrue( dns_firewall.dns_firewall( kv1_ques ) is not None )
        self.assertTrue( dns_firewall.dns_firewall( kv2_ques ) is not None )
 
        # make sure both responses come back
        self.assertTrue( dns_firewall.dns_firewall( kv2_ans ) is not None )
        self.assertTrue( dns_firewall.dns_firewall( kv1_ans ) is not None )
Пример #6
0
    def test_overlapping_requests( self ):

        # In this test, we will first send two DNS questions, then the DNS responses in 
        # reverse order
        # Expected:  question and answer allowed

        ques = self.fake_question()
        ans  = self.fake_answer( ques )

        # First send the request.
        d_ques = dns.dns()
        d_ques.id = self.fake_transaction_id()
        d_ques.questions.append( ques )
        kv1_ques = { "raw": self.serialize_dns( d_ques ) }

        d_ans = dns.dns()
        d_ans.qr = True
        d_ans.id = d_ques.id
        d_ans.questions.append( ques )
        d_ans.answers.append( ans )
        kv1_ans = { "raw": self.serialize_dns( d_ans ) }

        ques = self.fake_question()
        ans  = self.fake_answer( ques )

        # First send the request.
        d_ques = dns.dns()
        d_ques.id = self.fake_transaction_id()
        d_ques.questions.append( ques )
        kv2_ques = { "raw": self.serialize_dns( d_ques ) }

        d_ans = dns.dns()
        d_ans.qr = True
        d_ans.id = d_ques.id
        d_ans.questions.append( ques )
        d_ans.answers.append( ans )
        kv2_ans = { "raw": self.serialize_dns( d_ans ) }

        #
        # send the queries
        #
        self.assertTrue( dns_firewall.dns_firewall( kv1_ques ) is not None )
        self.assertTrue( dns_firewall.dns_firewall( kv2_ques ) is not None )

        # make sure both responses come back
        self.assertTrue( dns_firewall.dns_firewall( kv2_ans ) is not None )
        self.assertTrue( dns_firewall.dns_firewall( kv1_ans ) is not None )
Пример #7
0
    def test_allow_queries( self ):
 
        # Send a single DNS question.
        # Expected:  question is allowed by firewall.
 
        d = dns.dns()
        d.id = self.fake_transaction_id()
        d.questions.append( self.fake_question() )
        kv = { "raw": self.serialize_dns( d ) }
        self.assertTrue( dns_firewall.dns_firewall( kv ) is not None )
Пример #8
0
    def test_allow_queries( self ):

        # Send a single DNS question.
        # Expected:  question is allowed by firewall.

        d = dns.dns()
        d.id = self.fake_transaction_id()
        d.questions.append( self.fake_question() )
        kv = { "raw": self.serialize_dns( d ) }
        self.assertTrue( dns_firewall.dns_firewall( kv ) is not None )
Пример #9
0
    def test_spurious_response( self ):
 
        # Send a DNS answer for an unknown question.
        # Expected:  answer is rejected by firewall
 
        ques = self.fake_question()
        ans  = self.fake_answer( ques )
 
        d_ans = dns.dns()
        d_ans.qr = True
        d_ans.id = self.fake_transaction_id()
        d_ans.questions.append( ques )
        d_ans.answers.append( ans )
        kv_ans = { "raw": self.serialize_dns( d_ans ) }
 
        # Reject the response.
        self.assertTrue( dns_firewall.dns_firewall( kv_ans ) is None )
Пример #10
0
    def test_spurious_response( self ):

        # Send a DNS answer for an unknown question.
        # Expected:  answer is rejected by firewall

        ques = self.fake_question()
        ans  = self.fake_answer( ques )

        d_ans = dns.dns()
        d_ans.qr = True
        d_ans.id = self.fake_transaction_id()
        d_ans.questions.append( ques )
        d_ans.answers.append( ans )
        kv_ans = { "raw": self.serialize_dns( d_ans ) }

        # Reject the response.
        self.assertTrue( dns_firewall.dns_firewall( kv_ans ) is None )