diff options
| author | Ryan Thomas McBride <mcbride@cvs.openbsd.org> | 2006-10-06 17:09:42 +0000 |
|---|---|---|
| committer | Ryan Thomas McBride <mcbride@cvs.openbsd.org> | 2006-10-06 17:09:42 +0000 |
| commit | 2e423df0b4c4ed89ddd1662e5dc992d9f695118e (patch) | |
| tree | 2d83c9ff86ea57ca365a5d8335c2d67b690c9eb3 /regress/sbin/pfctl/pf1.optimized | |
| parent | ef822adaa3e227a2f075dc23611416bc535f6535 (diff) | |
Handle default 'flags S/SA keep state', 'no state' and 'flags any'.
Diffstat (limited to 'regress/sbin/pfctl/pf1.optimized')
| -rw-r--r-- | regress/sbin/pfctl/pf1.optimized | 26 |
1 files changed, 15 insertions, 11 deletions
diff --git a/regress/sbin/pfctl/pf1.optimized b/regress/sbin/pfctl/pf1.optimized index b790542fa9f..acd8619ae06 100644 --- a/regress/sbin/pfctl/pf1.optimized +++ b/regress/sbin/pfctl/pf1.optimized @@ -1,28 +1,32 @@ -@0 pass in all - [ Skip steps: i=end d=end f=3 sa=3 da=3 dp=2 ] +@0 pass in all flags S/SA keep state + [ Skip steps: i=end d=end f=4 p=2 sa=4 sp=2 da=4 dp=3 ] [ queue: qname= qid=0 pqname= pqid=0 ] [ Evaluations: 0 Packets: 0 Bytes: 0 States: 0 ] -@1 pass in proto tcp from any port <= 1024 to any label "foo_bar" - [ Skip steps: i=end d=end f=3 p=4 sa=3 da=3 ] +@1 pass in all flags S/SA no state + [ Skip steps: i=end d=end f=4 sa=4 da=4 dp=3 ] [ queue: qname= qid=0 pqname= pqid=0 ] [ Evaluations: 0 Packets: 0 Bytes: 0 States: 0 ] -@2 pass in proto tcp from any to any port = smtp - [ Skip steps: i=end d=end p=4 ] +@2 pass in proto tcp from any port <= 1024 to any flags S/SA keep state label "foo_bar" + [ Skip steps: i=end d=end f=4 p=5 sa=4 da=4 ] [ queue: qname= qid=0 pqname= pqid=0 ] [ Evaluations: 0 Packets: 0 Bytes: 0 States: 0 ] -@3 pass in inet proto tcp from 10.0.0.0/8 port > 1024 to ! 10.1.2.3 port != ssh - [ Skip steps: i=end d=end f=end sa=5 ] +@3 pass in proto tcp from any to any port = smtp flags S/SA keep state + [ Skip steps: i=end d=end p=5 ] [ queue: qname= qid=0 pqname= pqid=0 ] [ Evaluations: 0 Packets: 0 Bytes: 0 States: 0 ] -@4 pass in inet proto igmp from 10.0.0.0/8 to 10.1.1.1 allow-opts +@4 pass in inet proto tcp from 10.0.0.0/8 port > 1024 to ! 10.1.2.3 port != ssh flags S/SA keep state + [ Skip steps: i=end d=end f=end sa=6 ] + [ queue: qname= qid=0 pqname= pqid=0 ] + [ Evaluations: 0 Packets: 0 Bytes: 0 States: 0 ] +@5 pass in inet proto igmp from 10.0.0.0/8 to 10.1.1.1 keep state allow-opts [ Skip steps: i=end d=end f=end sp=end dp=end ] [ queue: qname= qid=0 pqname= pqid=0 ] [ Evaluations: 0 Packets: 0 Bytes: 0 States: 0 ] -@5 pass in inet proto tcp from 1.2.3.4 to any label "6:tcp:1.2.3.4::any:" +@6 pass in inet proto tcp from 1.2.3.4 to any flags S/SA keep state label "6:tcp:1.2.3.4::any:" [ Skip steps: i=end d=end f=end p=end sp=end da=end dp=end ] [ queue: qname= qid=0 pqname= pqid=0 ] [ Evaluations: 0 Packets: 0 Bytes: 0 States: 0 ] -@6 pass in inet proto tcp from 1.2.3.5 to any label "7:tcp:1.2.3.5::any:" +@7 pass in inet proto tcp from 1.2.3.5 to any flags S/SA keep state label "7:tcp:1.2.3.5::any:" [ Skip steps: i=end d=end f=end p=end sa=end sp=end da=end dp=end ] [ queue: qname= qid=0 pqname= pqid=0 ] [ Evaluations: 0 Packets: 0 Bytes: 0 States: 0 ] |