|
Revision tags: OPENBSD_5_1_BASE OPENBSD_5_2_BASE OPENBSD_5_3_BASE OPENBSD_5_4_BASE OPENBSD_5_5_BASE OPENBSD_5_6_BASE OPENBSD_5_7_BASE OPENBSD_5_8_BASE OPENBSD_5_9_BASE OPENBSD_6_0_BASE OPENBSD_6_1_BASE OPENBSD_6_2_BASE
|
|
| #
1.16 |
|
27-Nov-2011 |
henning |
adjust for port numbers instead of names by default
From: Lawrence Teo <lteo at devio at us>
|
|
Revision tags: OPENBSD_5_0_BASE
|
|
| #
1.15 |
|
08-Jul-2011 |
mcbride |
Update regress tests for the following changes:
- if_addr RB_TREE (Address sort differently on an interface)
- skip steps changes
- RDOMAIN
- reordering of address/port tests
- fastroute is gone
- keep state is no longer printed by default
- lo0 now has link-local scope address in addition to ::1
|
|
Revision tags: OPENBSD_4_1_BASE OPENBSD_4_2_BASE OPENBSD_4_3_BASE OPENBSD_4_4_BASE OPENBSD_4_5_BASE OPENBSD_4_6_BASE OPENBSD_4_7_BASE OPENBSD_4_8_BASE OPENBSD_4_9_BASE
|
|
| #
1.14 |
|
06-Oct-2006 |
mcbride |
Handle default 'flags S/SA keep state', 'no state' and 'flags any'.
|
|
Revision tags: OPENBSD_3_5_BASE OPENBSD_3_6_BASE OPENBSD_3_7_BASE OPENBSD_3_8_BASE OPENBSD_3_9_BASE OPENBSD_4_0_BASE
|
|
| #
1.13 |
|
05-Dec-2003 |
henning |
lo1, tun0, tun1 don't exist any more. thus, create the interfaces we need for
regress purposes before starting and destroy them afterwards.
lo1 -> lo1000000
tun0 -> tun1000000
tun1 -> tun1000001
ok markus@
|
|
Revision tags: OPENBSD_3_4_BASE
|
|
| #
1.12 |
|
29-Jul-2003 |
cedric |
Big Sync
|
|
Revision tags: OPENBSD_3_3_BASE
|
|
| #
1.11 |
|
06-Dec-2002 |
henning |
block -> block drop
|
| #
1.10 |
|
05-Dec-2002 |
henning |
no more rule numbers in output
|
| #
1.9 |
|
07-Oct-2002 |
henning |
output slightly different with new return-icmp handling, adjust
|
|
Revision tags: OPENBSD_3_2_BASE
|
|
| #
1.8 |
|
24-Apr-2002 |
dhartmei |
Add dynamic (in-kernel) interface name -> address translation. Instead of
using just the interface name instead of an address and reloading the rule
set whenever the interface changes its address, the interface name can be
put in parentheses, and the kernel will keep track of changes and update
rules. There is no additional cost for evaluating rules (per packet),
the cost occurs when an interface changes address (and the rules are
traversed and updated where necessary).
|
|
Revision tags: OPENBSD_3_1_BASE
|
|
| #
1.7 |
|
27-Mar-2002 |
mickey |
implement a "no-route" keyword.
usage semantics are analogous w/ "any", meaning is
"any ip address for which there is no route in the
current routing table", could be used in both from and to.
typical usage would be (assuming symmetrical routing):
block in from no-route to any
also doc "any" in the pf.conf.5, include in regress, etc.
tested by me on i386 and sparc.
dhartmei@ and frantzen@ ok
|
| #
1.6 |
|
27-Feb-2002 |
dhartmei |
And adjust regress tests to match the rule number output.
|
| #
1.5 |
|
13-Nov-2001 |
dhartmei |
Use more common interface names like lo0, tun0, enc0 for regress tests,
so they run anywhere. From jason@.
|
|
Revision tags: OPENBSD_3_0_BASE
|
|
| #
1.4 |
|
15-Sep-2001 |
wilfried |
return-icmp / icmp-type tests, ok dhartmei@
|
| #
1.3 |
|
15-Sep-2001 |
dhartmei |
Update regress tests. Some input syntax has changed (inet/inet6) as well
as some output format (netmasks, inet/inet6, return-icmp).
|
| #
1.2 |
|
03-Sep-2001 |
markus |
sync with output format changes (pfctl)
|
| #
1.1 |
|
26-Jul-2001 |
markus |
initial tests for the pfctl parser
|