38 lines
979 B
Python
38 lines
979 B
Python
import os
|
|
import sys
|
|
|
|
import testinfra.utils.ansible_runner
|
|
|
|
import warnings
|
|
warnings.filterwarnings("ignore", category=DeprecationWarning)
|
|
|
|
testinfra_hosts = testinfra.utils.ansible_runner.AnsibleRunner(
|
|
os.environ['MOLECULE_INVENTORY_FILE']).get_hosts('all')
|
|
|
|
sys.path.append('/usr/sbin')
|
|
|
|
|
|
def test_iptables_is_installed(host):
|
|
iptables = host.package("iptables")
|
|
assert iptables.is_installed
|
|
|
|
|
|
def test_iptables_running_and_enabled(host):
|
|
iptables = host.service("iptables")
|
|
assert iptables.is_running
|
|
assert iptables.is_enabled
|
|
|
|
|
|
def test_iptables_default_rules(host):
|
|
defaults = [
|
|
"-P INPUT ACCEPT",
|
|
"-A INPUT -m state --state RELATED,ESTABLISHED -j ACCEPT",
|
|
"-A INPUT -i lo -j ACCEPT",
|
|
"-A INPUT -p icmp --icmp-type echo-request -j ACCEPT",
|
|
"-A INPUT -p tcp -m tcp --dport 22 -j ACCEPT",
|
|
"-A INPUT -j REJECT"
|
|
]
|
|
|
|
rules = host.iptables.rules("filter", "INPUT")
|
|
assert defaults == rules
|