summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorbluhm <bluhm@openbsd.org>2016-11-23 12:26:40 +0000
committerbluhm <bluhm@openbsd.org>2016-11-23 12:26:40 +0000
commitb28e52a7067770a4b15fb6ea7689fa80d4b5208f (patch)
tree16da7845db811bd42875c329784a11c3d05fe1d4
parentExplicitly forbid to combine af-to with route-to in pfctl. The (diff)
downloadwireguard-openbsd-b28e52a7067770a4b15fb6ea7689fa80d4b5208f.tar.xz
wireguard-openbsd-b28e52a7067770a4b15fb6ea7689fa80d4b5208f.zip
Test that af-to cannot be used together with route-to, reply-to, dup-to.
-rw-r--r--regress/sbin/pfctl/pfail57.in8
-rw-r--r--regress/sbin/pfctl/pfail57.ok6
2 files changed, 14 insertions, 0 deletions
diff --git a/regress/sbin/pfctl/pfail57.in b/regress/sbin/pfctl/pfail57.in
new file mode 100644
index 00000000000..6f037f52b14
--- /dev/null
+++ b/regress/sbin/pfctl/pfail57.in
@@ -0,0 +1,8 @@
+pass in inet af-to inet6 from 2001:db8::1
+pass in inet af-to inet6 from 2001:db8::1 route-to lo0
+pass in inet af-to inet6 from 2001:db8::1 reply-to lo0
+pass in inet af-to inet6 from 2001:db8::1 dup-to lo0
+pass in inet6 af-to inet from 192.0.2.1
+pass in inet6 af-to inet from 192.0.2.1 route-to lo0
+pass in inet6 af-to inet from 192.0.2.1 reply-to lo0
+pass in inet6 af-to inet from 192.0.2.1 dup-to lo0
diff --git a/regress/sbin/pfctl/pfail57.ok b/regress/sbin/pfctl/pfail57.ok
new file mode 100644
index 00000000000..4d796b838a5
--- /dev/null
+++ b/regress/sbin/pfctl/pfail57.ok
@@ -0,0 +1,6 @@
+stdin:2: af-to cannot be used together with route-to, reply-to, dup-to
+stdin:3: af-to cannot be used together with route-to, reply-to, dup-to
+stdin:4: af-to cannot be used together with route-to, reply-to, dup-to
+stdin:6: af-to cannot be used together with route-to, reply-to, dup-to
+stdin:7: af-to cannot be used together with route-to, reply-to, dup-to
+stdin:8: af-to cannot be used together with route-to, reply-to, dup-to