TST: cymru whois search domain issue

intelmq/tests/bots/experts/cymru_whois/test_expert.py

@@ -5,6 +5,10 @@
 # -*- coding: utf-8 -*-
 import json
 import unittest
+import unittest.mock
+
+import dns.resolver
+import dns.name
 
 import intelmq.lib.test as test
 from intelmq.bots.experts.cymru_whois.expert import CymruExpertBot
@@ -57,6 +61,9 @@
                   }
 UNEXPECTED_UNICODE = {"__type": "Event",
                       "source.asn": 266522}
+UNKNOWN_IP = {"__type": "Event",
+              "source.ip": "255.255.255.210",
+              }
 
 
 @test.skip_redis()
@@ -113,6 +120,13 @@ def test_unexpected_unicode(self):
         self.run_bot()
         self.assertMessageEqual(0, UNEXPECTED_UNICODE)
 
+    def test_search_domain(self):
+        self.input_message = UNKNOWN_IP.copy()
+        dns.resolver.get_default_resolver()
+        with unittest.mock.patch.object(dns.resolver.default_resolver, 'search', [dns.name.Name('cert.ee.'.split('.'))]):
+            self.run_bot()
+        self.assertMessageEqual(0, UNKNOWN_IP)
+
 
 if __name__ == '__main__':  # pragma: no cover
     unittest.main()