diff options
| author | Ryan Thomas McBride <mcbride@cvs.openbsd.org> | 2003-12-16 05:02:47 +0000 |
|---|---|---|
| committer | Ryan Thomas McBride <mcbride@cvs.openbsd.org> | 2003-12-16 05:02:47 +0000 |
| commit | 4b5458a8e906982b70968bd31cbdb85ee4c5f81e (patch) | |
| tree | 7b5579b29feada66ebf9974b9287c8d4c81816ef /regress/sbin/pfctl/pf84.in | |
| parent | b0c87f9660a746ab8cb1be047264430c1ddf6552 (diff) | |
Test source-tracking syntax.
Diffstat (limited to 'regress/sbin/pfctl/pf84.in')
| -rw-r--r-- | regress/sbin/pfctl/pf84.in | 17 |
1 files changed, 17 insertions, 0 deletions
diff --git a/regress/sbin/pfctl/pf84.in b/regress/sbin/pfctl/pf84.in new file mode 100644 index 00000000000..52f62f3d541 --- /dev/null +++ b/regress/sbin/pfctl/pf84.in @@ -0,0 +1,17 @@ +nat on tun1000000 from 10.0.0.0/24 to any \ + -> { 10.0.1.1, 10.0.1.2 } round-robin sticky-address +rdr on tun1000000 from any to 10.0.1.1 \ + -> { 10.0.0.0/24 } sticky-address random +rdr on tun1000000 from any to 10.0.1.2 \ + -> { 10.0.0.1, 10.0.0.2 } sticky-address + +pass in proto tcp from any to any port 22 \ + keep state (source-track) +pass in proto tcp from any to any port 25 \ + keep state (source-track global) +pass in proto tcp from any to any port 80 \ + keep state (source-track rule, max-src-nodes 1000, max-src-states 3) +pass in proto tcp from any to any port 123 \ + keep state (source-track global, max-src-nodes 1000) +pass in proto tcp from any to any port 321 \ + keep state (source-track, max-src-states 3) |