summaryrefslogtreecommitdiff
path: root/regress/sbin/pfctl/pf84.ok
diff options
context:
space:
mode:
authorRyan Thomas McBride <mcbride@cvs.openbsd.org>2006-10-06 17:09:42 +0000
committerRyan Thomas McBride <mcbride@cvs.openbsd.org>2006-10-06 17:09:42 +0000
commit2e423df0b4c4ed89ddd1662e5dc992d9f695118e (patch)
tree2d83c9ff86ea57ca365a5d8335c2d67b690c9eb3 /regress/sbin/pfctl/pf84.ok
parentef822adaa3e227a2f075dc23611416bc535f6535 (diff)
Handle default 'flags S/SA keep state', 'no state' and 'flags any'.
Diffstat (limited to 'regress/sbin/pfctl/pf84.ok')
-rw-r--r--regress/sbin/pfctl/pf84.ok10
1 files changed, 5 insertions, 5 deletions
diff --git a/regress/sbin/pfctl/pf84.ok b/regress/sbin/pfctl/pf84.ok
index fa0f790566f..b665b24ae55 100644
--- a/regress/sbin/pfctl/pf84.ok
+++ b/regress/sbin/pfctl/pf84.ok
@@ -1,8 +1,8 @@
nat on tun1000000 inet from 10.0.0.0/24 to any -> { 10.0.1.1, 10.0.1.2 } round-robin sticky-address
rdr on tun1000000 inet from any to 10.0.1.1 -> 10.0.0.0/24 random sticky-address
rdr on tun1000000 inet from any to 10.0.1.2 -> { 10.0.0.1, 10.0.0.2 } round-robin sticky-address
-pass in proto tcp from any to any port = ssh keep state (source-track global)
-pass in proto tcp from any to any port = smtp keep state (source-track global)
-pass in proto tcp from any to any port = www keep state (source-track rule, max-src-states 3, max-src-nodes 1000)
-pass in proto tcp from any to any port = ntp keep state (source-track rule, max-src-nodes 1000)
-pass in proto tcp from any to any port = 321 keep state (source-track global, max-src-states 3)
+pass in proto tcp from any to any port = ssh flags S/SA keep state (source-track global)
+pass in proto tcp from any to any port = smtp flags S/SA keep state (source-track global)
+pass in proto tcp from any to any port = www flags S/SA keep state (source-track rule, max-src-states 3, max-src-nodes 1000)
+pass in proto tcp from any to any port = ntp flags S/SA keep state (source-track rule, max-src-nodes 1000)
+pass in proto tcp from any to any port = 321 flags S/SA keep state (source-track global, max-src-states 3)