badguardhome/internal/dnsforward/access_test.go

package dnsforward

import (
	"net"
	"testing"

	"github.com/stretchr/testify/assert"
)

func TestIsBlockedIPAllowed(t *testing.T) {
	a := &accessCtx{}
	assert.Nil(t, a.Init([]string{"1.1.1.1", "2.2.0.0/16"}, nil, nil))

	disallowed, disallowedRule := a.IsBlockedIP(net.IPv4(1, 1, 1, 1))
	assert.False(t, disallowed)
	assert.Empty(t, disallowedRule)

	disallowed, disallowedRule = a.IsBlockedIP(net.IPv4(1, 1, 1, 2))
	assert.True(t, disallowed)
	assert.Empty(t, disallowedRule)

	disallowed, disallowedRule = a.IsBlockedIP(net.IPv4(2, 2, 1, 1))
	assert.False(t, disallowed)
	assert.Empty(t, disallowedRule)

	disallowed, disallowedRule = a.IsBlockedIP(net.IPv4(2, 3, 1, 1))
	assert.True(t, disallowed)
	assert.Empty(t, disallowedRule)
}

func TestIsBlockedIPDisallowed(t *testing.T) {
	a := &accessCtx{}
	assert.Nil(t, a.Init(nil, []string{"1.1.1.1", "2.2.0.0/16"}, nil))

	disallowed, disallowedRule := a.IsBlockedIP(net.IPv4(1, 1, 1, 1))
	assert.True(t, disallowed)
	assert.Equal(t, "1.1.1.1", disallowedRule)

	disallowed, disallowedRule = a.IsBlockedIP(net.IPv4(1, 1, 1, 2))
	assert.False(t, disallowed)
	assert.Empty(t, disallowedRule)

	disallowed, disallowedRule = a.IsBlockedIP(net.IPv4(2, 2, 1, 1))
	assert.True(t, disallowed)
	assert.Equal(t, "2.2.0.0/16", disallowedRule)

	disallowed, disallowedRule = a.IsBlockedIP(net.IPv4(2, 3, 1, 1))
	assert.False(t, disallowed)
	assert.Empty(t, disallowedRule)
}

func TestIsBlockedIPBlockedDomain(t *testing.T) {
	a := &accessCtx{}
	assert.True(t, a.Init(nil, nil, []string{
		"host1",
		"host2",
		"*.host.com",
		"||host3.com^",
	}) == nil)

	// match by "host2.com"
	assert.True(t, a.IsBlockedDomain("host1"))
	assert.True(t, a.IsBlockedDomain("host2"))
	assert.False(t, a.IsBlockedDomain("host3"))

	// match by wildcard "*.host.com"
	assert.False(t, a.IsBlockedDomain("host.com"))
	assert.True(t, a.IsBlockedDomain("asdf.host.com"))
	assert.True(t, a.IsBlockedDomain("qwer.asdf.host.com"))
	assert.False(t, a.IsBlockedDomain("asdf.zhost.com"))

	// match by wildcard "||host3.com^"
	assert.True(t, a.IsBlockedDomain("host3.com"))
	assert.True(t, a.IsBlockedDomain("asdf.host3.com"))
}