Git-Mirrors/qubes-mirage-firewall
1
0
Fork 0
mirror of https://github.com/mirage/qubes-mirage-firewall.git synced 2025-04-25 09:29:19 -04:00
Code Issues Packages Projects Releases Wiki Activity

WIP

Browse Source
This commit is contained in:
linse 2019-06-08 01:44:09 +02:00
parent dee0d32549
commit 64a7fe7056
2 changed files with 6 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
test/unikernel.ml
View File

@ -57,9 +57,8 @@ module Client (T: TIME) (C: CONSOLE) (STACK: Mirage_stack_lwt.V4) (RES: Resolver
Format.printf "Exception as expected %s" msg;
Lwt.return_unit
let tcp_connect stack =
let tcp_connect port stack =
let ip = Ipaddr.V4.of_string_exn "10.137.0.5" in
let port = 8082 in
STACK.TCPV4.create_connection (STACK.tcpv4 stack) (ip, port) >>= function
| Ok flow ->
Log.info (fun f -> f "TCP test passed :)");
@ -123,7 +122,8 @@ module Client (T: TIME) (C: CONSOLE) (STACK: Mirage_stack_lwt.V4) (RES: Resolver
let start _time c stack res (ctx:CON.t) =
udp_fetch ~src_port:9090 ~echo_server_port:1235 stack >>= fun () ->
udp_fetch ~src_port:9091 ~echo_server_port:6668 stack >>= fun () ->
tcp_connect stack >>= fun () ->
tcp_connect 53 stack >>= fun () ->
tcp_connect 8082 stack >>= fun () ->
tcp_connect_denied stack
end

3
test/update-firewall.sh
View File

@ -23,6 +23,9 @@ done
echo "$TEST_VM firewall rules are now:"
qvm-firewall $TEST_VM list
echo "Setting $TEST_VM specialtarget=dns rule:"
qvm-firewall $TEST_VM add accept specialtarget=dns
echo "Setting $TEST_VM allow rule for TCP port 8082 to 10.137.0.5:"
qvm-firewall $TEST_VM add accept 10.137.0.5 tcp 8082