diff options
| author | Tim Meusel <tim@bastelfreak.de> | 2019-10-01 16:10:14 +0200 |
|---|---|---|
| committer | GitHub <noreply@github.com> | 2019-10-01 16:10:14 +0200 |
| commit | 6c1a735df3fe28a877009b4fef0db33eb7106e56 (patch) | |
| tree | 67eed982b65c8f663d4ce5e987c828430569e7c0 /spec | |
| parent | 631b6ae7d342eaa113833b62d0462dcccdced8f4 (diff) | |
| parent | 19c71d9abd269d88450f54ddb95e036c804a8fe8 (diff) | |
| download | puppet-ferm-6c1a735df3fe28a877009b4fef0db33eb7106e56.tar.gz puppet-ferm-6c1a735df3fe28a877009b4fef0db33eb7106e56.tar.bz2 | |
Merge pull request #81 from bastelfreak/hotifx
disable conntrack filtering in FORWARD/OUTPUT
Diffstat (limited to 'spec')
| -rw-r--r-- | spec/acceptance/ferm_spec.rb | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/spec/acceptance/ferm_spec.rb b/spec/acceptance/ferm_spec.rb index c5018da..f827dc2 100644 --- a/spec/acceptance/ferm_spec.rb +++ b/spec/acceptance/ferm_spec.rb @@ -32,7 +32,7 @@ basic_manifest = %( manage_configfile => true, manage_initfile => #{manage_initfile}, # CentOS-6 does not provide init script forward_policy => 'DROP', - output_policy => 'DROP', + output_policy => 'ACCEPT', input_policy => 'DROP', rules => { 'allow_acceptance_tests' => { @@ -66,7 +66,7 @@ describe 'ferm' do end describe command('iptables-save') do - its(:stdout) { is_expected.to match %r{.*filter.*:INPUT DROP.*:FORWARD DROP.*:OUTPUT DROP.*}m } + its(:stdout) { is_expected.to match %r{.*filter.*:INPUT DROP.*:FORWARD DROP.*:OUTPUT ACCEPT.*}m } end describe iptables do |