diff options
| author |   henning <henning@openbsd.org> | 2003-05-01 16:18:10 +0000 |
|---|---|---|
| committer | henning <henning@openbsd.org> | 2003-05-01 16:18:10 +0000 |
| commit | 55530c59e92785b41aca5bee847e0b49fe84d38f (patch) | |
| tree | 328df992522ac6cf4b7923aee6fdc5d15c36c38c | |
| parent | allow label on antispoof; requested by Gregor Binder <gbinder at sysfive.com> (diff) | |
| download | wireguard-openbsd-55530c59e92785b41aca5bee847e0b49fe84d38f.tar.xz wireguard-openbsd-55530c59e92785b41aca5bee847e0b49fe84d38f.zip | |
label on antispoof
| -rw-r--r-- | regress/sbin/pfctl/Makefile | 6 | ||||
| -rw-r--r-- | regress/sbin/pfctl/pf65.in | 2 | ||||
| -rw-r--r-- | regress/sbin/pfctl/pf65.loaded | 15 | ||||
| -rw-r--r-- | regress/sbin/pfctl/pf65.ok | 3 |
4 files changed, 23 insertions, 3 deletions
diff --git a/regress/sbin/pfctl/Makefile b/regress/sbin/pfctl/Makefile index 1daccd6c669..792bf6a7063 100644 --- a/regress/sbin/pfctl/Makefile +++ b/regress/sbin/pfctl/Makefile @@ -1,4 +1,4 @@ -# $OpenBSD: Makefile,v 1.133 2003/04/30 13:14:40 henning Exp $ +# $OpenBSD: Makefile,v 1.134 2003/05/01 16:18:10 henning Exp $ # TARGETS # pf: feed pfNN.in through pfctl and check wether the output matches pfNN.ok @@ -12,13 +12,13 @@ PFTESTS=1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 PFTESTS+=28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 -PFTESTS+=51 52 53 54 55 56 57 58 59 60 61 62 63 64 +PFTESTS+=51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 PFFAIL=1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 PFFAIL+=28 29 30 31 32 33 34 35 36 PFSIMPLE=1 2 PFSETUP=1 2 3 PFLOAD=1 2 3 4 5 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 23 24 25 26 27 28 29 -PFLOAD+=30 31 32 34 36 38 39 40 44 46 47 48 49 54 56 60 61 +PFLOAD+=30 31 32 34 36 38 39 40 44 46 47 48 49 54 56 60 61 65 PFALTQ=1 2 3 4 5 6 7 8 9 10 11 12 13 14 # disabled; no altq in anchors # PFLOAD+=33 35 37 42 43 45 51 58 59 62 63 64 diff --git a/regress/sbin/pfctl/pf65.in b/regress/sbin/pfctl/pf65.in new file mode 100644 index 00000000000..617ba5f51e0 --- /dev/null +++ b/regress/sbin/pfctl/pf65.in @@ -0,0 +1,2 @@ +antispoof for lo0 label "antispoof-lo0" +antispoof log quick for lo0 inet label "antispoof-lo0-2" diff --git a/regress/sbin/pfctl/pf65.loaded b/regress/sbin/pfctl/pf65.loaded new file mode 100644 index 00000000000..8716c65bbc1 --- /dev/null +++ b/regress/sbin/pfctl/pf65.loaded @@ -0,0 +1,15 @@ +@0 block drop in on ! lo0 inet from 127.0.0.0/8 to any label "antispoof-lo0" +[ Skip steps: i=end d=end p=end sp=end da=end dp=end ] +[ queue: qname= qid=0 pqname= pqid=0 ] +[ Evaluations: 0 Packets: 0 Bytes: 0 States: 0 ] + +@1 block drop in on ! lo0 inet6 from ::1 to any label "antispoof-lo0" +[ Skip steps: i=end d=end p=end sp=end da=end dp=end ] +[ queue: qname= qid=0 pqname= pqid=0 ] +[ Evaluations: 0 Packets: 0 Bytes: 0 States: 0 ] + +@2 block drop in log quick on ! lo0 inet from 127.0.0.0/8 to any label "antispoof-lo0-2" +[ Skip steps: i=end d=end f=end p=end sa=end sp=end da=end dp=end ] +[ queue: qname= qid=0 pqname= pqid=0 ] +[ Evaluations: 0 Packets: 0 Bytes: 0 States: 0 ] + diff --git a/regress/sbin/pfctl/pf65.ok b/regress/sbin/pfctl/pf65.ok new file mode 100644 index 00000000000..8239e9500c3 --- /dev/null +++ b/regress/sbin/pfctl/pf65.ok @@ -0,0 +1,3 @@ +block drop in on ! lo0 inet from 127.0.0.0/8 to any label "antispoof-lo0" +block drop in on ! lo0 inet6 from ::1 to any label "antispoof-lo0" +block drop in log quick on ! lo0 inet from 127.0.0.0/8 to any label "antispoof-lo0-2" |