[ci] add iptables integration tests for dbip and maxmind
Closed this issue · 1 comments
chr0mag commented
Both the dbip and maxmind datasets are updated weekly. It would be nice to have an integration test automatically run weekly that does the following:
- build dbip and maxmind
ipsetsfor both ipv4 and ipv6 - load each set into
iptables/ip6tables, use them as part of a rule, and start the service to ensure the sets are compatible
The following python modules might help:
The iptables library is available on Pypi, but the ipsetpy module hasn't had a commit since 2017 and only supports Python3.4. Recent ipset versions have a libipset library that could be used to build Python bindings.
Executing the tests from Python would make it simple to include in the existing python-tests as part of the pytest run.
Alternatively a Bash script could be used to perform the same task.