diff options
| author | Ryan Thomas McBride <mcbride@cvs.openbsd.org> | 2003-12-16 05:02:47 +0000 |
|---|---|---|
| committer | Ryan Thomas McBride <mcbride@cvs.openbsd.org> | 2003-12-16 05:02:47 +0000 |
| commit | 4b5458a8e906982b70968bd31cbdb85ee4c5f81e (patch) | |
| tree | 7b5579b29feada66ebf9974b9287c8d4c81816ef /regress/sbin/pfctl/pf84.ok | |
| parent | b0c87f9660a746ab8cb1be047264430c1ddf6552 (diff) | |
Test source-tracking syntax.
Diffstat (limited to 'regress/sbin/pfctl/pf84.ok')
| -rw-r--r-- | regress/sbin/pfctl/pf84.ok | 8 |
1 files changed, 8 insertions, 0 deletions
diff --git a/regress/sbin/pfctl/pf84.ok b/regress/sbin/pfctl/pf84.ok new file mode 100644 index 00000000000..e031da0e292 --- /dev/null +++ b/regress/sbin/pfctl/pf84.ok @@ -0,0 +1,8 @@ +nat on tun1000000 inet from 10.0.0.0/24 to any -> { 10.0.1.1, 10.0.1.2 } round-robin sticky-address +rdr on tun1000000 inet from any to 10.0.1.1 -> 10.0.0.0/24 random sticky-address +rdr on tun1000000 inet from any to 10.0.1.2 -> { 10.0.0.1, 10.0.0.2 } round-robin sticky-address +pass in proto tcp from any to any port = ssh keep state (source-track global) +pass in proto tcp from any to any port = smtp keep state (source-track global) +pass in proto tcp from any to any port = www keep state (source-track rule, max-src-states 3, max-src-nodes 1000) +pass in proto tcp from any to any port = ntp keep state (source-track global, max-src-nodes 1000) +pass in proto tcp from any to any port = 321 keep state (source-track global, max-src-states 3) |