pfctl 0.7.0

Library for interfacing with the Packet Filter (PF) firewall on macOS
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31

#[macro_use]
#[allow(dead_code)]
mod helper;

use crate::helper::pfcli;
use assert_matches::assert_matches;

fn before_each() {}
fn after_each() {}

test!(enable_pf {
    let mut pf = pfctl::PfCtl::new().unwrap();

    pfcli::disable_firewall();
    assert_matches!(pf.enable(), Ok(()));
    assert!(pfcli::is_enabled());
    assert_matches!(pf.enable(), Err(e) if e.kind() == pfctl::ErrorKind::StateAlreadyActive);
    assert_matches!(pf.try_enable(), Ok(()));
    assert!(pfcli::is_enabled());
});

test!(disable_pf {
    let mut pf = pfctl::PfCtl::new().unwrap();

    pfcli::enable_firewall();
    assert_matches!(pf.disable(), Ok(()));
    assert!(!pfcli::is_enabled());
    assert_matches!(pf.disable(), Err(e) if e.kind() == pfctl::ErrorKind::StateAlreadyActive);
    assert_matches!(pf.try_disable(), Ok(()));
    assert!(!pfcli::is_enabled());
});