Say in the converge preview that routed traffic is not previewed and is dropped unless declared (hq ADR 0100)

2026-09-22 18:01:04 +02:00
parent 3dc7d0e386
commit ba0f44a36d
2 changed files with 8 additions and 0 deletions
@@ -171,6 +171,9 @@ func TestConvergingPreviewsThenChangesAndAdoptingKeepsWhatWasTaken(t *testing.T)
 		"notes\n      replacing the found file /etc/notes.conf (original kept at",
 		"assigns nftables",
 		"the found firewall (ufw) is disabled, never flushed",
+		// What it routes is not a listener: said not to be previewed, and to be dropped.
+		"not previewed: traffic the machine routes that is not a published port",
+		"the derived filter drops it unless a module declares it",
 	} {
 		if !strings.Contains(preview, want) {
 			t.Errorf("the preview does not say %q:\n%s", want, preview)