diff options
| author | Daniel Hartmeier <dhartmei@cvs.openbsd.org> | 2002-07-16 15:46:56 +0000 |
|---|---|---|
| committer | Daniel Hartmeier <dhartmei@cvs.openbsd.org> | 2002-07-16 15:46:56 +0000 |
| commit | 4bf8bb109bb5139361a70415c4a69807b9358cd5 (patch) | |
| tree | b02bbaa3fe5f53cd27fdb1e7eb77fd205a7ab687 /regress/sbin/pfctl/pfail12.in | |
| parent | ad1ffeeb4b8a805be041727880589fbb6d4009aa (diff) | |
Add nat_consistent() and rdr_consistent() for checks that should occur
after rule expansion, similar to rule_consistent(). Fixes the
non-effective test for rdr rules for non-TCP/UDP protocols with ports,
found by mpech@, ok frantzen@
Diffstat (limited to 'regress/sbin/pfctl/pfail12.in')
| -rw-r--r-- | regress/sbin/pfctl/pfail12.in | 3 |
1 files changed, 3 insertions, 0 deletions
diff --git a/regress/sbin/pfctl/pfail12.in b/regress/sbin/pfctl/pfail12.in index e08419140b6..2d3e3dc7520 100644 --- a/regress/sbin/pfctl/pfail12.in +++ b/regress/sbin/pfctl/pfail12.in @@ -1,2 +1,5 @@ +# ports are invalid for proto icmp +rdr on lo0 proto icmp from any to 11.1.1.1/32 port 12345 -> 172.17.0.2 port 69 + # flags on non-tcp rules are invalid pass in all flags S/SA |