Commit Graph

169 Commits

Author SHA1 Message Date
Michael Rash
7f12fc72d1 [test suite] more NAT DNS coverage 2016-05-28 05:06:07 -07:00
Michael Rash
8514061681 [test suite] minor removal of comments 2016-05-28 04:41:01 -07:00
Michael Rash
3a10ccff4d [test suite] NAT DNS test coverage fix 2016-05-28 04:39:04 -07:00
Michael Rash
8366e118e2 [server] negative testing for ENABLE_NAT_DNS 2016-05-27 23:33:13 -07:00
Michael Rash
6e54e9452a [test suite] add ENABLE_RULE_PREPEND test 2016-05-26 19:21:07 -07:00
Michael Rash
231cca538d [test suite] add missing config files for HMAC SHA3_256 tests 2016-05-21 18:04:00 -07:00
Michael Rash
09fcad0f04 [test suite] add HMAC_SHA3_512 test 2016-05-20 18:45:20 -07:00
Jonathan Bennett
c6e95820a4 Add tests for include_keys 2016-05-05 13:26:35 -05:00
Michael Rash
9d92f65a03 [test suite] add test for X-Fowarded-For header 2016-04-16 07:40:24 -07:00
Michael Rash
06e42a3cfa [test suite] first test for include_keys functionality 2016-02-21 11:50:41 -08:00
Michael Rash
98e79396ce [test suite] start on --access-folder include dir test 2015-12-13 02:24:30 -08:00
Michael Rash
b305f67ca5 [test suite] start on %include_folder tests, make sure at least one valid access.conf stanza has been parsed 2015-12-12 20:39:37 -08:00
Michael Rash
ba3d16c5e3 [test suite] complete cycle test from %include derived access stanza 2015-12-12 11:19:14 -08:00
Michael Rash
7757929624 [test suite] multi-include non-recursive access.conf test 2015-12-12 06:23:16 -08:00
Michael Rash
5b0cfb16a0 [test suite] add access.conf %include recursion limit test 2015-12-10 15:31:18 -08:00
Michael Rash
ae1e804ea1 [test suite] add test for access.conf include directive 2015-12-08 19:51:51 -08:00
Michael Rash
988075b52b [server] bug fix to honor client timeout SPA messages in --nat-local mode, fixes #173 2015-12-04 19:36:51 -08:00
Michael Rash
8c7a007a4a [test suite] differentiate TIMEOUT vs. CLIENT_TIMEOUT values in command open close cycles 2015-11-17 22:41:22 -08:00
Michael Rash
f6829fe527 [test suite] added command cycle close NONE test 2015-11-17 22:08:58 -08:00
Michael Rash
72d6a0c018 [test suite] add multi-cycle open/close command tests 2015-10-26 13:02:51 -07:00
Michael Rash
7c476a747d [test suite] add hmac_cmd_open_close_cycle_access5.conf file 2015-10-19 20:24:34 -04:00
Michael Rash
3a591fbf49 [test suite] add hmac_cmd_open_close_cycle_access4.conf file 2015-10-18 09:48:30 -07:00
Michael Rash
7a09daba4c [test suite] more command cycle tests (multiple substitution vars) 2015-10-18 09:28:48 -07:00
Michael Rash
5597730e27 [test suite] added open/close file tests 2015-10-18 09:13:49 -07:00
Michael Rash
d67fbde992 [server] start on command open/close cycle support (issue #117) 2015-10-13 18:00:07 -07:00
Michael Rash
89b2e8f477 [server] interface goes down will cause fwknopd to exit
By default, fwknopd will now exit if the interface that it is
sniffing goes down (patch contributed by Github user 'sgh7'). If this
happens, it is expected that the native process monitoring feature in
things like systemd or upstart will restart fwknopd. However, if fwknopd
is not being monitored by systemd, upstart, or anything else, this
behavior can be disabled with the EXIT_AT_INTF_DOWN variable in the
fwknopd.conf file. If disabled, fwknopd will try to recover when a
downed interface comes back up.
2015-07-18 13:11:25 -07:00
Michael Rash
4d3c472116 [test suite] add Rijndael+HMAC test for F-Droid Fwknop2 client written by Jonathan Bennett 2015-06-16 18:32:19 -07:00
Michael Rash
6bdfa95067 [server / test suite] cleaner SNAT MASQUERADE support 2015-04-22 00:58:35 -07:00
Michael Rash
6467b922d5 [test suite] additional FORWARD_ALL tests 2015-04-21 03:30:32 -07:00
Michael Rash
cc765a23db [test suite] minor FORCE_NAT config tweak 2015-04-19 12:22:55 -07:00
Michael Rash
68db4b77a5 [server] allow FORWARD_ALL to control whether FORCE_NAT is required 2015-04-19 07:11:10 -07:00
Michael Rash
f06c6e3b9c [test suite] allow default FORCE_NAT 0.0.0.0 0 to apply 2015-04-18 05:37:31 -07:00
Michael Rash
86cdc90f4a [test suite] add open_ports_force_masq_access.conf file 2015-04-12 15:47:41 -07:00
Michael Rash
0fa42ae117 [server] allow DISABLE_DNAT to not require FORCE_NAT 2015-04-07 16:34:49 -07:00
Michael Rash
37c9f38565 [test suite] FORCE_SNAT requires FORCE_NAT test 2015-04-06 21:20:31 -04:00
Michael Rash
8e6db3a5da [server] extend FORWARD_ALL to apply to NAT operations
This is a significant commit to allow all ports and protocols to be
NAT'd in conjunction with FORWARD ACCEPT rules. This commit is in
support of 6b7a3bbdae to allow fwknopd to
function as an SPA gateway.
2015-04-06 20:04:33 -04:00
Michael Rash
60d982a103 [test suite] added GPG 4096-bit key combination tests 2015-03-28 07:54:30 -04:00
Michael Rash
0f86406afb [test suite] added gpg subkey signing test 2015-03-26 22:01:02 -04:00
Michael Rash
91a4e82f23 [test suite] added 4096-bit signing key test 2015-03-24 22:38:41 -04:00
Michael Rash
59d0ef0b17 [test suite] minor file rename 2015-03-24 22:03:21 -04:00
Michael Rash
1594194e73 [test suite] added new gpg keyrings for large key tests (4096 bits) 2015-03-24 22:01:55 -04:00
Michael Rash
08bc2aa603 [test suite] rely exclusively on tarball for gpg keyrings 2015-03-23 17:55:59 -07:00
Michael Rash
7a9a430f24 [test suite] additional DESTINATION accept/filter tests 2014-11-30 22:17:51 -05:00
Michael Rash
cf84f016a3 [test suite] add complete cycle DESTINATION test 2014-11-30 21:37:42 -05:00
Grant Pannell
624872ef48 Add DESTINATION access.conf directive and ENABLE_DESTINATION_RULE fwknopd.conf directive 2014-11-29 15:05:06 +10:30
Michael Rash
8872e50818 [test suite] use digest tracking override for ALF fwknopd fuzzing 2014-11-25 15:04:30 -05:00
Michael Rash
4880243902 [test suite] added invalid_firewd_input_chain_* files 2014-10-28 21:56:19 -04:00
Michael Rash
58d47cb385 [test suite] additional code coverage for a few areas 2014-10-24 20:39:40 -04:00
Michael Rash
22161af075 [test suite] add ipt_local_nat_fwknopd.conf 2014-10-23 08:39:42 -04:00
Michael Rash
b8f1cf6c6c make sure test suite conf files are included in Makefile.am 2014-10-21 22:49:03 -04:00