From 2b0d57b46488044d0b2cb685dbea237cead38c0d Mon Sep 17 00:00:00 2001
From: Nate Brown <nbrown.us@gmail.com>
Date: Fri, 21 Nov 2025 14:23:00 -0600
Subject: [PATCH] Track unsafe in the mock firewall

---
 firewall_test.go | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/firewall_test.go b/firewall_test.go
index 4d5e93c..86e1ef3 100644
--- a/firewall_test.go
+++ b/firewall_test.go
@@ -1339,6 +1339,7 @@ func TestFirewall_Drop_EnforceIPMatch(t *testing.T) {
 }
 
 type addRuleCall struct {
+	unsafe    bool
 	incoming  bool
 	proto     uint8
 	startPort int32
@@ -1358,6 +1359,7 @@ type mockFirewall struct {
 
 func (mf *mockFirewall) AddRule(unsafe, incoming bool, proto uint8, startPort int32, endPort int32, groups []string, host string, ip, localIp, caName string, caSha string) error {
 	mf.lastCall = addRuleCall{
+		unsafe:    unsafe,
 		incoming:  incoming,
 		proto:     proto,
 		startPort: startPort,