selftests/netfilter/bridge_brouter.sh

20 ip -Version > /dev/null 2>&1
22 	echo "SKIP: Could not run test without ip tool"
26 ip netns add ns0
27 ip netns add ns1
28 ip netns add ns2
30 ip link add veth0 netns ns0 type veth peer name eth0 netns ns1
35 ip link add veth1 netns ns0 type veth peer name eth0 netns ns2
37 ip -net ns0 link set lo up
38 ip -net ns0 link set veth0 up
39 ip -net ns0 link set veth1 up
41 ip -net ns0 link add br0 type bridge
47 ip -net ns0 link set veth0 master br0
48 ip -net ns0 link set veth1 master br0
49 ip -net ns0 link set br0 up
50 ip -net ns0 addr add 10.0.0.1/24 dev br0
54   ip -net ns$i link set lo up
55   ip -net ns$i link set eth0 up
56   ip -net ns$i addr add 10.0.0.1$i/24 dev eth0
64 	# ip stack won't process OTHERHOST (foreign unicast mac) packets.
65 	ip netns exec ns0 ebtables -t broute -A BROUTING -p ipv4 --ip-protocol icmp -j redirect --redirect-target=DROP
71 	# ping netns1, expected to not work (ip forwarding is off)
72 	ip netns exec ns1 ping -q -c 1 10.0.0.12 > /dev/null 2>&1
79 	# neither needs an ip address, but at least the bridge needs
80 	# an ip address in same network segment as ns1 and ns2 (ns0
82 	ip netns exec ns0 sysctl -q net.ipv4.conf.veth0.forwarding=1
83 	ip netns exec ns0 sysctl -q net.ipv4.conf.veth1.forwarding=1
87 	ip netns exec ns1 ping -q -c 1 10.0.0.12 > /dev/null
94 	ip netns exec ns0 ebtables -t broute -F
97 	ip netns exec ns1 ping -q -c 1 10.0.0.12 > /dev/null
103 	ip netns exec ns0 ebtables -t filter -A FORWARD -p ipv4 --ip-protocol icmp -j DROP
106 	ip netns exec ns1 ping -q -c 1 10.0.0.12 > /dev/null 2>&1
113 	ip netns exec ns0 ebtables -t broute -A BROUTING -p ipv4 --ip-protocol icmp -j redirect --redirect-target=DROP
115 	ip netns exec ns2 ping -q -c 1 10.0.0.11 > /dev/null
126 ip netns exec ns1 ping -c 1 -q 10.0.0.12 > /dev/null
132 ip netns exec ns2 ping -c 1 -q 10.0.0.11 > /dev/null
144 for i in 0 1 2; do ip netns del ns$i;done