Antonio Ojea <aojea@xxxxxxxxxx> wrote: > This test ensures that conntrack correctly applies reject rules to > established connections after DNAT, even when those connections are > persistent. > > The test sets up three network namespaces: ns1, ns2, and nsrouter. > nsrouter acts as a router with DNAT, exposing a service running in ns2 > via a virtual IP. > > The test validates that is possible to filter and reject new and > established connections to the DNATed IP in the prerouting and forward > filters. Reviewed-by: Florian Westphal <fw@xxxxxxxxx> Tested-by: Florian Westphal <fw@xxxxxxxxx>
