label on antispoof

4 files changed, 23 insertions, 3 deletions

diff --git a/regress/sbin/pfctl/Makefile b/regress/sbin/pfctl/Makefile
index 1daccd6c669..792bf6a7063 100644
--- a/regress/sbin/pfctl/Makefile
+++ b/regress/sbin/pfctl/Makefile
@@ -1,4 +1,4 @@
-# $OpenBSD: Makefile,v 1.133 2003/04/30 13:14:40 henning Exp $
+# $OpenBSD: Makefile,v 1.134 2003/05/01 16:18:10 henning Exp $
 
 # TARGETS
 # pf: feed pfNN.in through pfctl and check wether the output matches pfNN.ok
@@ -12,13 +12,13 @@
 
 PFTESTS=1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27
 PFTESTS+=28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50
-PFTESTS+=51 52 53 54 55 56 57 58 59 60 61 62 63 64
+PFTESTS+=51 52 53 54 55 56 57 58 59 60 61 62 63 64 65
 PFFAIL=1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27
 PFFAIL+=28 29 30 31 32 33 34 35 36
 PFSIMPLE=1 2
 PFSETUP=1 2 3
 PFLOAD=1 2 3 4 5 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 23 24 25 26 27 28 29
-PFLOAD+=30 31 32 34 36 38 39 40 44 46 47 48 49 54 56 60 61
+PFLOAD+=30 31 32 34 36 38 39 40 44 46 47 48 49 54 56 60 61 65
 PFALTQ=1 2 3 4 5 6 7 8 9 10 11 12 13 14
 # disabled; no altq in anchors
 # PFLOAD+=33 35 37 42 43 45 51 58 59 62 63 64
diff --git a/regress/sbin/pfctl/pf65.in b/regress/sbin/pfctl/pf65.in
new file mode 100644
index 00000000000..617ba5f51e0
--- /dev/null
+++ b/regress/sbin/pfctl/pf65.in
@@ -0,0 +1,2 @@
+antispoof for lo0 label "antispoof-lo0"
+antispoof log quick for lo0 inet label "antispoof-lo0-2"
diff --git a/regress/sbin/pfctl/pf65.loaded b/regress/sbin/pfctl/pf65.loaded
new file mode 100644
index 00000000000..8716c65bbc1
--- /dev/null
+++ b/regress/sbin/pfctl/pf65.loaded
@@ -0,0 +1,15 @@
+@0 block drop in on ! lo0 inet from 127.0.0.0/8 to any label "antispoof-lo0" 
+[ Skip steps: i=end d=end p=end sp=end da=end dp=end ]
+[ queue: qname= qid=0 pqname= pqid=0 ]
+[ Evaluations: 0         Packets: 0         Bytes: 0           States: 0     ]
+
+@1 block drop in on ! lo0 inet6 from ::1 to any label "antispoof-lo0" 
+[ Skip steps: i=end d=end p=end sp=end da=end dp=end ]
+[ queue: qname= qid=0 pqname= pqid=0 ]
+[ Evaluations: 0         Packets: 0         Bytes: 0           States: 0     ]
+
+@2 block drop in log quick on ! lo0 inet from 127.0.0.0/8 to any label "antispoof-lo0-2" 
+[ Skip steps: i=end d=end f=end p=end sa=end sp=end da=end dp=end ]
+[ queue: qname= qid=0 pqname= pqid=0 ]
+[ Evaluations: 0         Packets: 0         Bytes: 0           States: 0     ]
+
diff --git a/regress/sbin/pfctl/pf65.ok b/regress/sbin/pfctl/pf65.ok
new file mode 100644
index 00000000000..8239e9500c3
--- /dev/null
+++ b/regress/sbin/pfctl/pf65.ok
@@ -0,0 +1,3 @@
+block drop in on ! lo0 inet from 127.0.0.0/8 to any label "antispoof-lo0" 
+block drop in on ! lo0 inet6 from ::1 to any label "antispoof-lo0" 
+block drop in log quick on ! lo0 inet from 127.0.0.0/8 to any label "antispoof-lo0-2"