require 'test/unit'

require 'treetop'

require 'ript'

class IPTablesParserTest < Test::Unit::TestCase

  def setup

    @ript = IPTables::Ript.new

    @test_data = Hash.new

    @test_data["forward allow 10.0.0.0/8 to 192.168.0.1:8080 udp tcp state"] = {

      "dst_ip" => "192.168.0.1:8080", "src_ip" => "10.0.0.0/8",

      "action" => "allow", "target" => "forward", "state" => "state",

      "proto" => "udp tcp" }

    @test_data["forward allow 10.0.0.0/8 to 192.168.0.1:8080 tcp udp state"] = {

      "dst_ip" => "192.168.0.1:8080", "src_ip" => "10.0.0.0/8",

      "action" => "allow", "target" => "forward", "state" => "state",

      "proto" => "tcp udp" }

    @test_data["input deny 10.0.0.0:8 to 192.168.0.1/32 tcp"] = {

      "dst_ip" => "192.168.0.1/32", "src_ip" => "10.0.0.0:8",

      "action" => "deny", "target" => "input", "state" => "",

      "proto" => "tcp" }

    @test_data["output reject 10.0.0.0/8 to 192.168.0.1/32:8080 tcp"] = {

      "dst_ip" => "192.168.0.1/32:8080", "src_ip" => "10.0.0.0/8",

      "action" => "reject", "target" => "output", "state" => "",

      "proto" => "tcp" }

  end

  def test_parses_okay

    assert_not_nil @ript.parse "forward allow 10.0.0.0/8 to 192.168.0.1:8080 udp tcp state"

    assert_not_nil @ript.parse "forward log 10.0.0.0:8 to 192.168.0.1/32 udp icmp tcp"

    assert_not_nil @ript.parse "forward log 10.0.0.0:8 to 192.168.0.1 tcp state"

    assert_not_nil @ript.parse "forward deny 10.0.0.0 to 192.168.0.1 all"

    assert_not_nil @ript.parse "forward allow 10.0.0.0 to 192.168.0.1 all"

  end

  def test_results

    @test_data.each_key do |t|

      assert_equal @test_data[t], @ript.parse(t)

    end

  end

  def test_convert

    assert_equal "iptables -A FORWARD -j ACCEPT -s 10.0.0.0 -d 192.168.0.1",

    @ript.convert("forward allow 10.0.0.0 to 192.168.0.1 all")

    assert_equal "iptables -A FORWARD -j DROP -s 10.0.0.0 -d 192.168.0.1",

    @ript.convert("forward deny 10.0.0.0 to 192.168.0.1 all")

    assert_equal "iptables -A FORWARD -j REJECT -s 10.0.0.0 -d 192.168.0.1",

    @ript.convert("forward reject 10.0.0.0 to 192.168.0.1 all")

    assert_equal "iptables -A FORWARD -j LOG -s 10.0.0.0 -d 192.168.0.1",

    @ript.convert("forward log 10.0.0.0 to 192.168.0.1 all")

  end

end