diff options
| author |   mcbride <mcbride@openbsd.org> | 2010-01-12 16:00:00 +0000 |
|---|---|---|
| committer | mcbride <mcbride@openbsd.org> | 2010-01-12 16:00:00 +0000 |
| commit | 970dbb5aaad55fce58e77a918d4b4d0e088cbc94 (patch) | |
| tree | 5a9fb8cb5acc7d061b4c92794f1fce9cccd01f26 | |
| parent | { if0, if1 } is ambiguous in a route spec, and this should have been (diff) | |
| download | wireguard-openbsd-970dbb5aaad55fce58e77a918d4b4d0e088cbc94.tar.xz wireguard-openbsd-970dbb5aaad55fce58e77a918d4b4d0e088cbc94.zip | |
no nat is no longer legal
convert nat/rdr/binat rules to nat-to/rdr-to/binat-to
| -rw-r--r-- | regress/sbin/pfctl/pf70.in | 3 | ||||
| -rw-r--r-- | regress/sbin/pfctl/pf71.in | 3 | ||||
| -rw-r--r-- | regress/sbin/pfctl/pf72.in | 2 |
3 files changed, 3 insertions, 5 deletions
diff --git a/regress/sbin/pfctl/pf70.in b/regress/sbin/pfctl/pf70.in index ecba6aa466f..6b4c310b597 100644 --- a/regress/sbin/pfctl/pf70.in +++ b/regress/sbin/pfctl/pf70.in @@ -1,4 +1,3 @@ -no nat on lo0 from 10.0.1.0/24 tag regress - nat on lo0 from 10.0.0.0/8 -> lo0 +match out on lo0 from 10.0.0.0/8 to any nat-to lo0 block out on lo0 tagged regress diff --git a/regress/sbin/pfctl/pf71.in b/regress/sbin/pfctl/pf71.in index b8b11b1ec80..2f09764ec20 100644 --- a/regress/sbin/pfctl/pf71.in +++ b/regress/sbin/pfctl/pf71.in @@ -1,4 +1,3 @@ -no rdr on lo0 from 10.0.1.0/24 tag regress - rdr on lo0 proto tcp from 10.0.0.0/8 to port 80 -> lo0 +match in on lo0 proto tcp from 10.0.0.0/8 to port 80 rdr-to lo0 block out on lo0 tagged regress diff --git a/regress/sbin/pfctl/pf72.in b/regress/sbin/pfctl/pf72.in index 9217588011e..2011a11d5f0 100644 --- a/regress/sbin/pfctl/pf72.in +++ b/regress/sbin/pfctl/pf72.in @@ -1,4 +1,4 @@ # test binat tagging -binat on lo0 from 192.168.1.1 to any tag regress -> 10.0.0.1 +match on lo0 from 192.168.1.1 to any tag regress binat-to 10.0.0.1 block out on lo0 tagged regress |