test(rpfilter): log denied packet type

Closes: firewalld#1436

Author: TorontoMedia

src/tests/features/rpfilter.at

@@ -2,21 +2,23 @@ FWD_START_TEST([rpfilter - strict])
 AT_KEYWORDS(rpfilter)
 CHECK_NFTABLES_FIB()
 
+AT_CHECK([sed -i 's/^LogDenied.*/LogDenied=multicast/' ./firewalld.conf])
 AT_CHECK([sed -i 's/^IPv6_rpfilter.*/IPv6_rpfilter=strict/' ./firewalld.conf])
 FWD_RELOAD()
 
 NFT_LIST_RULES([inet], [filter_PREROUTING], 0, [dnl
     table inet firewalld {
         chain filter_PREROUTING {
             icmpv6 type { nd-router-advert, nd-neighbor-solicit } accept
-            meta nfproto ipv6 fib saddr . mark . iif oif missing drop
+            meta nfproto ipv6 fib saddr . mark . iif oif missing meta pkttype multicast log prefix "rpfilter_DROP: " drop
         }
     }
 ])
 
 IP6TABLES_LIST_RULES([mangle], [PREROUTING], 0, [dnl
     ACCEPT 58 -- ::/0 ::/0 ipv6-icmptype 134
     ACCEPT 58 -- ::/0 ::/0 ipv6-icmptype 135
+    LOG 0 -- ::/0 ::/0 rpfilter validmark invert PKTTYPE = multicast LOG flags 0 level 4 prefix "rpfilter_DROP: "
     DROP 0 -- ::/0 ::/0 rpfilter validmark invert
     PREROUTING_direct 0 -- ::/0 ::/0
     PREROUTING_POLICIES 0 -- ::/0 ::/0