diff options
| author |   henning <henning@openbsd.org> | 2002-07-05 16:48:44 +0000 |
|---|---|---|
| committer | henning <henning@openbsd.org> | 2002-07-05 16:48:44 +0000 |
| commit | dbf6d04f56584b9d9b89f80a1b706ae687d27db6 (patch) | |
| tree | fb85a276815846ca79da14336a46fc164bc9bda6 | |
| parent | regress for getaddrinfo/getnameinfo (diff) | |
| download | wireguard-openbsd-dbf6d04f56584b9d9b89f80a1b706ae687d27db6.tar.xz wireguard-openbsd-dbf6d04f56584b9d9b89f80a1b706ae687d27db6.zip | |
another small bug I found while installing a -current pf firewall.
we don't support
pass/block in on ! <interface>
(at least, not yet)
let the parser complain instead of ignoring the '!'
ok pb@, dhartmei@
| -rw-r--r-- | sbin/pfctl/parse.y | 7 |
1 files changed, 6 insertions, 1 deletions
diff --git a/sbin/pfctl/parse.y b/sbin/pfctl/parse.y index 26c114be836..6be0d9e3de0 100644 --- a/sbin/pfctl/parse.y +++ b/sbin/pfctl/parse.y @@ -1,4 +1,4 @@ -/* $OpenBSD: parse.y,v 1.110 2002/07/01 10:07:40 espie Exp $ */ +/* $OpenBSD: parse.y,v 1.111 2002/07/05 16:48:44 henning Exp $ */ /* * Copyright (c) 2001 Markus Friedl. All rights reserved. @@ -349,6 +349,11 @@ pfrule : action dir log quick interface route af proto fromto r.log = $3; r.quick = $4; + if ($5->not) { + yyerror("'pass/block on ! $interface' isn't " + "supported."); + YYERROR; + } r.af = $7; r.flags = $12.b1; |