Merge pull request #48 from bastelfreak/interface

add support for interface specific rules

1 files changed, 30 insertions, 12 deletions

diff --git a/spec/defines/rule_spec.rb b/spec/defines/rule_spec.rb
index 0926432..bd4ed73 100644
--- a/spec/defines/rule_spec.rb
+++ b/spec/defines/rule_spec.rb
@@ -6,21 +6,39 @@ describe 'ferm::rule', type: :define do
       let :facts do
         facts
       end
-      let(:title) { 'filter-ssh' }
-      let :params do
-        {
-          chain: 'INPUT',
-          policy: 'ACCEPT',
-          proto: 'tcp',
-          dport: '22',
-          saddr: '127.0.0.1'
-        }
+
+      context 'without a specific interface' do
+        let(:title) { 'filter-ssh' }
+        let :params do
+          {
+            chain: 'INPUT',
+            policy: 'ACCEPT',
+            proto: 'tcp',
+            dport: '22',
+            saddr: '127.0.0.1'
+          }
+        end
+
+        it { is_expected.to compile.with_all_deps }
+        it { is_expected.to contain_concat__fragment('INPUT-filter-ssh').with_content("mod comment comment 'filter-ssh' proto tcp dport 22 saddr @ipfilter(127.0.0.1) ACCEPT;\n") }
       end
+      context 'with a specific interface' do
+        let(:title) { 'filter-ssh' }
+        let :params do
+          {
+            chain: 'INPUT',
+            policy: 'ACCEPT',
+            proto: 'tcp',
+            dport: '22',
+            saddr: '127.0.0.1',
+            interface: 'eth0'
+          }
+        end
 
-      context 'default params create simple rule' do
         it { is_expected.to compile.with_all_deps }
-        # it { is_expected.to contain_concat__fragment('INPUT-filter-ssh').with_content("proto tcp dport ssh  saddr @ipfilter(127.0.0.1)  ACCEPT;") }
-        it { is_expected.to contain_concat__fragment('INPUT-filter-ssh') }
+        it { is_expected.to contain_concat__fragment('INPUT-eth0-filter-ssh').with_content("  mod comment comment 'filter-ssh' proto tcp dport 22 saddr @ipfilter(127.0.0.1) ACCEPT;\n") }
+        it { is_expected.to contain_concat__fragment('INPUT-eth0-aaa').with_content("interface eth0 {\n") }
+        it { is_expected.to contain_concat__fragment('INPUT-eth0-zzz').with_content("}\n") }
       end
     end
   end