diff options
| author |   mcbride <mcbride@openbsd.org> | 2004-02-24 20:47:16 +0000 |
|---|---|---|
| committer | mcbride <mcbride@openbsd.org> | 2004-02-24 20:47:16 +0000 |
| commit | 6e22c39f1f4e60821798861c73157439b046b0ec (patch) | |
| tree | e43ee165bc53bacd155abd899ab84dca4363d681 | |
| parent | put auvia in the kernel (diff) | |
| download | wireguard-openbsd-6e22c39f1f4e60821798861c73157439b046b0ec.tar.xz wireguard-openbsd-6e22c39f1f4e60821798861c73157439b046b0ec.zip | |
Handle 'source-track rule' requirement for 'max-src-nodes'.
| -rw-r--r-- | regress/sbin/pfctl/pf84.in | 2 | ||||
| -rw-r--r-- | regress/sbin/pfctl/pf84.loaded | 2 | ||||
| -rw-r--r-- | regress/sbin/pfctl/pf84.ok | 2 |
3 files changed, 3 insertions, 3 deletions
diff --git a/regress/sbin/pfctl/pf84.in b/regress/sbin/pfctl/pf84.in index 52f62f3d541..bcccec9d179 100644 --- a/regress/sbin/pfctl/pf84.in +++ b/regress/sbin/pfctl/pf84.in @@ -12,6 +12,6 @@ pass in proto tcp from any to any port 25 \ pass in proto tcp from any to any port 80 \ keep state (source-track rule, max-src-nodes 1000, max-src-states 3) pass in proto tcp from any to any port 123 \ - keep state (source-track global, max-src-nodes 1000) + keep state (source-track, max-src-nodes 1000) pass in proto tcp from any to any port 321 \ keep state (source-track, max-src-states 3) diff --git a/regress/sbin/pfctl/pf84.loaded b/regress/sbin/pfctl/pf84.loaded index b9546febb6f..ca79b21c987 100644 --- a/regress/sbin/pfctl/pf84.loaded +++ b/regress/sbin/pfctl/pf84.loaded @@ -22,7 +22,7 @@ [ Skip steps: i=end d=end f=end p=end sa=end sp=end da=end ] [ queue: qname= qid=0 pqname= pqid=0 ] [ Evaluations: 0 Packets: 0 Bytes: 0 States: 0 ] -@3 pass in proto tcp from any to any port = ntp keep state (source-track global, max-src-nodes 1000) +@3 pass in proto tcp from any to any port = ntp keep state (source-track rule, max-src-nodes 1000) [ Skip steps: i=end d=end f=end p=end sa=end sp=end da=end ] [ queue: qname= qid=0 pqname= pqid=0 ] [ Evaluations: 0 Packets: 0 Bytes: 0 States: 0 ] diff --git a/regress/sbin/pfctl/pf84.ok b/regress/sbin/pfctl/pf84.ok index e031da0e292..fa0f790566f 100644 --- a/regress/sbin/pfctl/pf84.ok +++ b/regress/sbin/pfctl/pf84.ok @@ -4,5 +4,5 @@ rdr on tun1000000 inet from any to 10.0.1.2 -> { 10.0.0.1, 10.0.0.2 } round-robi pass in proto tcp from any to any port = ssh keep state (source-track global) pass in proto tcp from any to any port = smtp keep state (source-track global) pass in proto tcp from any to any port = www keep state (source-track rule, max-src-states 3, max-src-nodes 1000) -pass in proto tcp from any to any port = ntp keep state (source-track global, max-src-nodes 1000) +pass in proto tcp from any to any port = ntp keep state (source-track rule, max-src-nodes 1000) pass in proto tcp from any to any port = 321 keep state (source-track global, max-src-states 3) |