diff options
| author | Ryan Thomas McBride <mcbride@cvs.openbsd.org> | 2006-10-06 17:09:42 +0000 |
|---|---|---|
| committer | Ryan Thomas McBride <mcbride@cvs.openbsd.org> | 2006-10-06 17:09:42 +0000 |
| commit | 2e423df0b4c4ed89ddd1662e5dc992d9f695118e (patch) | |
| tree | 2d83c9ff86ea57ca365a5d8335c2d67b690c9eb3 /regress/sbin/pfctl/pf88.ok | |
| parent | ef822adaa3e227a2f075dc23611416bc535f6535 (diff) | |
Handle default 'flags S/SA keep state', 'no state' and 'flags any'.
Diffstat (limited to 'regress/sbin/pfctl/pf88.ok')
| -rw-r--r-- | regress/sbin/pfctl/pf88.ok | 38 |
1 files changed, 19 insertions, 19 deletions
diff --git a/regress/sbin/pfctl/pf88.ok b/regress/sbin/pfctl/pf88.ok index e54fe473491..dcebcb5cefd 100644 --- a/regress/sbin/pfctl/pf88.ok +++ b/regress/sbin/pfctl/pf88.ok @@ -1,22 +1,22 @@ -pass in on lo1000000 inet from any to 10.0.0.1 -pass in on lo1000000 inet from any to 10.0.0.1 -pass all -pass out all -pass out all -pass out quick all -pass on lo1000001 inet from any to 10.0.0.1 -pass on lo1000000 inet from any to 10.0.0.1 -pass inet from any to 10.0.0.2 modulate state -pass inet from any to 10.0.0.2 keep state +pass in on lo1000000 inet from any to 10.0.0.1 flags S/SA keep state +pass in on lo1000000 inet from any to 10.0.0.1 flags S/SA keep state +pass all flags S/SA keep state +pass out all flags S/SA keep state +pass out all flags S/SA keep state +pass out quick all flags S/SA keep state +pass on lo1000001 inet from any to 10.0.0.1 flags S/SA keep state +pass on lo1000000 inet from any to 10.0.0.1 flags S/SA keep state +pass inet from any to 10.0.0.2 flags S/SA modulate state +pass inet from any to 10.0.0.2 flags S/SA keep state block drop inet from 10.0.0.3 to 10.0.0.2 -pass inet from any to 10.0.0.2 modulate state +pass inet from any to 10.0.0.2 flags S/SA modulate state block drop inet from 10.0.0.3 to 10.0.0.2 -pass inet from any to 10.0.0.2 synproxy state -pass out inet proto tcp from 10.0.0.4 to 10.0.0.5 keep state -pass out inet proto tcp from 10.0.0.4 to 10.0.0.5 port = www keep state -pass out all -pass in all -pass in on lo1000001 all -pass in on lo1000001 all keep state -pass in on lo1000001 all +pass inet from any to 10.0.0.2 flags S/SA synproxy state +pass out inet proto tcp from 10.0.0.4 to 10.0.0.5 flags S/SA keep state +pass out inet proto tcp from 10.0.0.4 to 10.0.0.5 port = www flags S/SA keep state +pass out all flags S/SA keep state +pass in all flags S/SA keep state +pass in on lo1000001 all flags S/SA keep state +pass in on lo1000001 all flags S/SA keep state +pass in on lo1000001 all flags S/SA keep state block drop all |