Add dynamic (in-kernel) interface name -> address translation. Instead of

using just the interface name instead of an address and reloading the rule
set whenever the interface changes its address, the interface name can be
put in parentheses, and the kernel will keep track of changes and update
rules. There is no additional cost for evaluating rules (per packet),
the cost occurs when an interface changes address (and the rules are
traversed and updated where necessary).

1 files changed, 6 insertions, 6 deletions

diff --git a/regress/sbin/pfctl/pf13.ok b/regress/sbin/pfctl/pf13.ok
index 00dffe49017..f6c63c34823 100644
--- a/regress/sbin/pfctl/pf13.ok
+++ b/regress/sbin/pfctl/pf13.ok
@@ -2,11 +2,11 @@
 @1 pass in quick on enc0 fastroute inet all 
 @2 pass in quick on enc0 fastroute inet6 all 
 @3 pass out quick on tun0 route-to tun1 all 
-@4 pass out quick on tun0 route-to tun1 inet from any to 192.168.1.1/32 
-@5 pass out quick on tun0 route-to tun1 inet6 from any to fec0::1/128 
+@4 pass out quick on tun0 route-to tun1 inet from any to 192.168.1.1 
+@5 pass out quick on tun0 route-to tun1 inet6 from any to fec0::1 
 @6 block in on tun0 dup-to tun1:192.168.1.1 inet proto tcp from any to any port = ftp 
 @7 block in on tun0 dup-to tun1:fec0::1 inet6 proto tcp from any to any port = ftp 
-@8 pass in quick on tun0 route-to tun1 inet from 192.168.1.1/32 to 10.1.1.1/32 
-@9 pass in quick on tun0 route-to tun1 inet6 from fec0::1/64 to fec1::2/128 
-@10 pass in quick on tun0 dup-to tun1:192.168.1.100 inet from 192.168.1.1/32 to 10.1.1.1/32 
-@11 pass in quick on tun0 dup-to tun1:fec1::2 inet6 from fec0::1/64 to fec1::2/128 
+@8 pass in quick on tun0 route-to tun1 inet from 192.168.1.1 to 10.1.1.1 
+@9 pass in quick on tun0 route-to tun1 inet6 from fec0::1/64 to fec1::2 
+@10 pass in quick on tun0 dup-to tun1:192.168.1.100 inet from 192.168.1.1 to 10.1.1.1 
+@11 pass in quick on tun0 dup-to tun1:fec1::2 inet6 from fec0::1/64 to fec1::2