From c523aeffde74a1d7a085fdecf52250a96736051e Mon Sep 17 00:00:00 2001 From: Peter Simons Date: Fri, 18 Mar 2016 11:43:30 +0100 Subject: nixos/tests/firewall.nix: ping now succeeds in the firewall's default configuration --- nixos/tests/firewall.nix | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) (limited to 'nixos') diff --git a/nixos/tests/firewall.nix b/nixos/tests/firewall.nix index 9faf19f0359f..8f2cb27b60f1 100644 --- a/nixos/tests/firewall.nix +++ b/nixos/tests/firewall.nix @@ -35,9 +35,9 @@ import ./make-test.nix ( { pkgs, ... } : { # Local connections should still work. $walled->succeed("curl -v http://localhost/ >&2"); - # Connections to the firewalled machine should fail. + # Connections to the firewalled machine should fail, but ping should succeed. $attacker->fail("curl --fail --connect-timeout 2 http://walled/ >&2"); - $attacker->fail("ping -c 1 walled >&2"); + $attacker->succeed("ping -c 1 walled >&2"); # Outgoing connections/pings should still work. $walled->succeed("curl -v http://attacker/ >&2"); -- cgit 1.4.1