summaryrefslogtreecommitdiff
path: root/regress/sbin/pfctl
diff options
context:
space:
mode:
authorMarco Pfatschbacher <mpf@cvs.openbsd.org>2007-09-23 21:00:01 +0000
committerMarco Pfatschbacher <mpf@cvs.openbsd.org>2007-09-23 21:00:01 +0000
commit5f6fd67864ae90d21af62c72ef95920255078cae (patch)
treef99fcbd9356d4b8f78721127731d7673c3997317 /regress/sbin/pfctl
parent12c6e1091233851f57058bc75701015cafe00237 (diff)
Allow numbers to be used as unquoted strings again.
While there, also restrict the use of concatenated, unquoted strings for variable assignments only. Eyeballed by markus@, OK henning@
Diffstat (limited to 'regress/sbin/pfctl')
-rw-r--r--regress/sbin/pfctl/Makefile4
-rw-r--r--regress/sbin/pfctl/pf95.in24
-rw-r--r--regress/sbin/pfctl/pf95.ok12
3 files changed, 38 insertions, 2 deletions
diff --git a/regress/sbin/pfctl/Makefile b/regress/sbin/pfctl/Makefile
index 804caac5959..e206bb68acc 100644
--- a/regress/sbin/pfctl/Makefile
+++ b/regress/sbin/pfctl/Makefile
@@ -1,4 +1,4 @@
-# $OpenBSD: Makefile,v 1.198 2007/09/19 22:45:04 mpf Exp $
+# $OpenBSD: Makefile,v 1.199 2007/09/23 21:00:00 mpf Exp $
# TARGETS
# pf: feed pfNN.in through pfctl and check wether the output matches pfNN.ok
@@ -14,7 +14,7 @@
PFTESTS=1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27
PFTESTS+=28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50
PFTESTS+=51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73
-PFTESTS+=74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94
+PFTESTS+=74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95
PFFAIL=1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 23 24 25 27
PFFAIL+=28 29 30 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52
PFSIMPLE=1 2
diff --git a/regress/sbin/pfctl/pf95.in b/regress/sbin/pfctl/pf95.in
new file mode 100644
index 00000000000..049e68fedce
--- /dev/null
+++ b/regress/sbin/pfctl/pf95.in
@@ -0,0 +1,24 @@
+set require-order no
+
+# varset allows concatenated strings as numbers
+myports = 55 66
+pass in proto tcp from any to any port { $myports }
+
+# queuenames can be numbers
+altq on lo0 tbrsize 1824 bandwidth 10Mb priq queue 80
+queue 80 priority 2 priq(default)
+
+# tablenames can be numbers
+table <444> { 1.2.3.4 }
+pass in on lo1000000 proto tcp to 10.0.0.1 port 80 flags S/SA modulate state \
+ (max-src-conn 100, max-src-conn-rate 10/5, overload <444> flush)
+
+# filename can be a number
+# XXX not easy to test
+#table <filetest> file 666
+
+# labels, tags, anchors can be numbers
+pass in on lo0 from 1.2.3.4 keep state label 88
+pass in on lo0 from 1.2.3.4 keep state tag 57
+pass in on lo0 from 1.2.3.4 keep state tagged 57
+anchor 23 on lo0
diff --git a/regress/sbin/pfctl/pf95.ok b/regress/sbin/pfctl/pf95.ok
new file mode 100644
index 00000000000..64c002c63ec
--- /dev/null
+++ b/regress/sbin/pfctl/pf95.ok
@@ -0,0 +1,12 @@
+set require-order no
+myports = "55 66"
+altq on lo0 priq bandwidth 10Mb tbrsize 1824 queue { 80 }
+queue 80 priority 2 priq( default )
+table <444> { 1.2.3.4 }
+pass in proto tcp from any to any port = 55 flags S/SA keep state
+pass in proto tcp from any to any port = 66 flags S/SA keep state
+pass in on lo1000000 inet proto tcp from any to 10.0.0.1 port = www flags S/SA modulate state (source-track rule, max-src-conn 100, max-src-conn-rate 10/5, overload <444> flush, src.track 5)
+pass in on lo0 inet from 1.2.3.4 to any flags S/SA keep state label "88"
+pass in on lo0 inet from 1.2.3.4 to any flags S/SA keep state tag 57
+pass in on lo0 inet from 1.2.3.4 to any flags S/SA keep state tagged 57
+anchor "23" on lo0 all