diff options
| author | Daniel Hartmeier <dhartmei@cvs.openbsd.org> | 2003-02-03 15:44:53 +0000 |
|---|---|---|
| committer | Daniel Hartmeier <dhartmei@cvs.openbsd.org> | 2003-02-03 15:44:53 +0000 |
| commit | 7f9e383105f5f9b02cb27c42cef4d4c8db12270b (patch) | |
| tree | 04c73873049e4b9cc9b6e6d62ce2ee258d8d196e /regress/sbin/pfctl/pf46.in | |
| parent | 59bf24a030195c8eb48026e6e0e377501ff16d32 (diff) | |
Don't allow loopback interfaces as route/reply/dup-to targets. ok henning@
Diffstat (limited to 'regress/sbin/pfctl/pf46.in')
| -rw-r--r-- | regress/sbin/pfctl/pf46.in | 16 |
1 files changed, 8 insertions, 8 deletions
diff --git a/regress/sbin/pfctl/pf46.in b/regress/sbin/pfctl/pf46.in index 545c3c4caff..833be0ad7b1 100644 --- a/regress/sbin/pfctl/pf46.in +++ b/regress/sbin/pfctl/pf46.in @@ -1,8 +1,8 @@ -pass in on lo0 route-to { (lo0 127.0.0.1), (lo0 127.0.0.2) } all -pass out on lo0 route-to { (lo0 127.0.0.1), (lo0 127.0.0.2) } round-robin all -pass in on lo0 route-to (lo0 127.0.0.1/24) bitmask all -pass out on lo0 dup-to (lo0 127.0.0.1/24) random all -pass in on lo0 reply-to { lo0, lo0 } round-robin inet6 all -pass in on lo0 reply-to (lo0 127.0.0.0/28) source-hash 0x0123456789ABCDEF0123456789abcdef inet all -pass out on lo0 route-to (lo0 127.0.0.1/24) source-hash foobarlicious all -pass in on lo0 dup-to (lo0 127.0.0.1/24) round-robin all +pass in on lo0 route-to { (pflog0 127.0.0.1), (pflog0 127.0.0.2) } all +pass out on lo0 route-to { (pflog0 127.0.0.1), (pflog0 127.0.0.2) } round-robin all +pass in on lo0 route-to (pflog0 127.0.0.1/24) bitmask all +pass out on lo0 dup-to (pflog0 127.0.0.1/24) random all +pass in on lo0 reply-to { pflog0, pflog0 } round-robin inet6 all +pass in on lo0 reply-to (pflog0 127.0.0.0/28) source-hash 0x0123456789ABCDEF0123456789abcdef inet all +pass out on lo0 route-to (pflog0 127.0.0.1/24) source-hash foobarlicious all +pass in on lo0 dup-to (pflog0 127.0.0.1/24) round-robin all |