package tunnel

import "testing"

func TestAllowEgress(t *testing.T) {
	cfg := EgressConfig{Allowed: []string{"192.0.2.10:8443", "*.projectshitpost.fun:443"}}
	cases := []struct {
		target string
		want   bool
	}{
		{"192.0.2.10:8443", true},
		{"foo.projectshitpost.fun:443", true},
		{"projectshitpost.fun:443", false}, // wildcard "*.x" doesn't match bare "x"
		{"8.8.8.8:53", false},
		{"192.0.2.10:22", false},
	}
	for _, tc := range cases {
		if got := cfg.Allow(tc.target); got != tc.want {
			t.Errorf("Allow(%q) = %v, want %v", tc.target, got, tc.want)
		}
	}
}