diff --git a/nftables_test.go b/nftables_test.go index 0fcc5d4..7489cd1 100644 --- a/nftables_test.go +++ b/nftables_test.go @@ -212,6 +212,30 @@ func TestRuleOperations(t *testing.T) { }, }) + c.AddRule(&nftables.Rule{ + Table: filter, + Chain: prerouting, + Position: rules[2].Handle, + Exprs: []expr.Any{ + &expr.Verdict{ + // [ immediate reg 0 drop ] + Kind: expr.VerdictDrop, + }, + }, + }) + + c.InsertRule(&nftables.Rule{ + Table: filter, + Chain: prerouting, + Position: rules[2].Handle, + Exprs: []expr.Any{ + &expr.Verdict{ + // [ immediate reg 0 queue ] + Kind: expr.VerdictQueue, + }, + }, + }) + if err := c.Flush(); err != nil { t.Fatal(err) } @@ -221,8 +245,10 @@ func TestRuleOperations(t *testing.T) { want = []expr.VerdictKind{ expr.VerdictQueue, expr.VerdictAccept, + expr.VerdictQueue, expr.VerdictAccept, expr.VerdictDrop, + expr.VerdictDrop, } for i, r := range rules {