pfctl 0.7.0

Library for interfacing with the Packet Filter (PF) firewall on macOS
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47

#[macro_use]
#[allow(dead_code)]
mod helper;

use crate::helper::pfcli;
use assert_matches::assert_matches;
use uuid::Uuid;

fn unique_anchor() -> String {
    format!("pfctl-rs.integration.testing.{}", Uuid::new_v4().simple())
}

fn before_each() {}
fn after_each() {}

test!(add_filter_anchor {
    let anchor_name = unique_anchor();
    let mut pf = pfctl::PfCtl::new().unwrap();

    assert_matches!(pf.add_anchor(&anchor_name, pfctl::AnchorKind::Filter), Ok(()));

    let anchors = pfcli::get_anchors(None);
    assert!(anchors.contains(&anchor_name));

    assert_matches!(
        pf.add_anchor(&anchor_name, pfctl::AnchorKind::Filter),
        Err(e) if e.kind() == pfctl::ErrorKind::StateAlreadyActive
    );
    assert_matches!(pf.try_add_anchor(&anchor_name, pfctl::AnchorKind::Filter), Ok(()));
});

test!(remove_filter_anchor {
    let anchor_name = unique_anchor();
    let mut pf = pfctl::PfCtl::new().unwrap();

    assert_matches!(pf.add_anchor(&anchor_name, pfctl::AnchorKind::Filter), Ok(()));
    assert_matches!(pf.remove_anchor(&anchor_name, pfctl::AnchorKind::Filter), Ok(()));

    let anchors = pfcli::get_anchors(None);
    assert!(!anchors.contains(&anchor_name));

    assert_matches!(
        pf.remove_anchor(&anchor_name, pfctl::AnchorKind::Filter),
        Err(e) if e.kind() == pfctl::ErrorKind::AnchorDoesNotExist
    );
    assert_matches!(pf.try_remove_anchor(&anchor_name, pfctl::AnchorKind::Filter), Ok(()));
});