summaryrefslogtreecommitdiff
path: root/regress/sbin
diff options
context:
space:
mode:
authorDaniel Hartmeier <dhartmei@cvs.openbsd.org>2001-08-19 16:31:07 +0000
committerDaniel Hartmeier <dhartmei@cvs.openbsd.org>2001-08-19 16:31:07 +0000
commitd91329ab04ffd6674782980e01d0b465d163c355 (patch)
treeda57791969d9e5221cbfa6582e5f25ee92526c76 /regress/sbin
parent41c454051895b81c6262a6f5e7bb5d0fa7359e29 (diff)
Regress test for parameter list expansion syntax.
Diffstat (limited to 'regress/sbin')
-rw-r--r--regress/sbin/pfctl/Makefile4
-rw-r--r--regress/sbin/pfctl/pf4.in13
-rw-r--r--regress/sbin/pfctl/pf4.ok46
3 files changed, 61 insertions, 2 deletions
diff --git a/regress/sbin/pfctl/Makefile b/regress/sbin/pfctl/Makefile
index 89ec2c4c7cf..210ee7991bd 100644
--- a/regress/sbin/pfctl/Makefile
+++ b/regress/sbin/pfctl/Makefile
@@ -1,8 +1,8 @@
-# $OpenBSD: Makefile,v 1.2 2001/07/31 09:02:18 wilfried Exp $
+# $OpenBSD: Makefile,v 1.3 2001/08/19 16:31:06 dhartmei Exp $
NOMAN=
NOPROG=
-PFTESTS=1 2 3
+PFTESTS=1 2 3 4
pfail1:
@pfctl -nvR- < ${.CURDIR}/pfail1.in > /dev/null 2>&1 || \
diff --git a/regress/sbin/pfctl/pf4.in b/regress/sbin/pfctl/pf4.in
new file mode 100644
index 00000000000..03e1bc8f514
--- /dev/null
+++ b/regress/sbin/pfctl/pf4.in
@@ -0,0 +1,13 @@
+block in all
+block in proto tcp all
+block in proto { tcp, udp } all
+
+block in from any to any
+block in from 10.0.0.0/8 to any
+block in from ! 10.0.0.0/8 to any
+block in from { 10.0.0.0/8, 172.16.0.0/12 } to any
+
+block in proto tcp from any port = ssh to any
+block in proto tcp from any port { ssh, ftp >< 2048, != 1234, >= www } to any
+
+block in proto { tcp, udp } from { 10.0.0.0/8, 172.16.0.0/12 } port { ssh, ftp } to { 192.168.0.0/16, 12.34.56.78 } port { 6667, 6668 } keep state
diff --git a/regress/sbin/pfctl/pf4.ok b/regress/sbin/pfctl/pf4.ok
new file mode 100644
index 00000000000..d6cbcd0ea65
--- /dev/null
+++ b/regress/sbin/pfctl/pf4.ok
@@ -0,0 +1,46 @@
+@1 block in all
+@1 block in proto tcp all
+@1 block in proto udp all
+@1 block in proto tcp all
+@1 block in all
+@1 block in from 10.0.0.0/255.0.0.0 to any
+@1 block in from ! 10.0.0.0/255.0.0.0 to any
+@1 block in from 172.16.0.0/255.240.0.0 to any
+@1 block in from 10.0.0.0/255.0.0.0 to any
+@1 block in proto tcp from any port = ssh to any
+@1 block in proto tcp from any port >= 80 to any
+@1 block in proto tcp from any port != 1234 to any
+@1 block in proto tcp from any port 21 >< 2048 to any
+@1 block in proto tcp from any port = ssh to any
+@1 block in proto udp from 172.16.0.0/255.240.0.0 port = 21 to 12.34.56.78 port = 6668 keep state
+@1 block in proto udp from 172.16.0.0/255.240.0.0 port = 21 to 12.34.56.78 port = 6667 keep state
+@1 block in proto udp from 172.16.0.0/255.240.0.0 port = 21 to 192.168.0.0/255.255.0.0 port = 6668 keep state
+@1 block in proto udp from 172.16.0.0/255.240.0.0 port = 21 to 192.168.0.0/255.255.0.0 port = 6667 keep state
+@1 block in proto udp from 172.16.0.0/255.240.0.0 port = ssh to 12.34.56.78 port = 6668 keep state
+@1 block in proto udp from 172.16.0.0/255.240.0.0 port = ssh to 12.34.56.78 port = 6667 keep state
+@1 block in proto udp from 172.16.0.0/255.240.0.0 port = ssh to 192.168.0.0/255.255.0.0 port = 6668 keep state
+@1 block in proto udp from 172.16.0.0/255.240.0.0 port = ssh to 192.168.0.0/255.255.0.0 port = 6667 keep state
+@1 block in proto udp from 10.0.0.0/255.0.0.0 port = 21 to 12.34.56.78 port = 6668 keep state
+@1 block in proto udp from 10.0.0.0/255.0.0.0 port = 21 to 12.34.56.78 port = 6667 keep state
+@1 block in proto udp from 10.0.0.0/255.0.0.0 port = 21 to 192.168.0.0/255.255.0.0 port = 6668 keep state
+@1 block in proto udp from 10.0.0.0/255.0.0.0 port = 21 to 192.168.0.0/255.255.0.0 port = 6667 keep state
+@1 block in proto udp from 10.0.0.0/255.0.0.0 port = ssh to 12.34.56.78 port = 6668 keep state
+@1 block in proto udp from 10.0.0.0/255.0.0.0 port = ssh to 12.34.56.78 port = 6667 keep state
+@1 block in proto udp from 10.0.0.0/255.0.0.0 port = ssh to 192.168.0.0/255.255.0.0 port = 6668 keep state
+@1 block in proto udp from 10.0.0.0/255.0.0.0 port = ssh to 192.168.0.0/255.255.0.0 port = 6667 keep state
+@1 block in proto tcp from 172.16.0.0/255.240.0.0 port = ftp to 12.34.56.78 port = 6668 keep state
+@1 block in proto tcp from 172.16.0.0/255.240.0.0 port = ftp to 12.34.56.78 port = 6667 keep state
+@1 block in proto tcp from 172.16.0.0/255.240.0.0 port = ftp to 192.168.0.0/255.255.0.0 port = 6668 keep state
+@1 block in proto tcp from 172.16.0.0/255.240.0.0 port = ftp to 192.168.0.0/255.255.0.0 port = 6667 keep state
+@1 block in proto tcp from 172.16.0.0/255.240.0.0 port = ssh to 12.34.56.78 port = 6668 keep state
+@1 block in proto tcp from 172.16.0.0/255.240.0.0 port = ssh to 12.34.56.78 port = 6667 keep state
+@1 block in proto tcp from 172.16.0.0/255.240.0.0 port = ssh to 192.168.0.0/255.255.0.0 port = 6668 keep state
+@1 block in proto tcp from 172.16.0.0/255.240.0.0 port = ssh to 192.168.0.0/255.255.0.0 port = 6667 keep state
+@1 block in proto tcp from 10.0.0.0/255.0.0.0 port = ftp to 12.34.56.78 port = 6668 keep state
+@1 block in proto tcp from 10.0.0.0/255.0.0.0 port = ftp to 12.34.56.78 port = 6667 keep state
+@1 block in proto tcp from 10.0.0.0/255.0.0.0 port = ftp to 192.168.0.0/255.255.0.0 port = 6668 keep state
+@1 block in proto tcp from 10.0.0.0/255.0.0.0 port = ftp to 192.168.0.0/255.255.0.0 port = 6667 keep state
+@1 block in proto tcp from 10.0.0.0/255.0.0.0 port = ssh to 12.34.56.78 port = 6668 keep state
+@1 block in proto tcp from 10.0.0.0/255.0.0.0 port = ssh to 12.34.56.78 port = 6667 keep state
+@1 block in proto tcp from 10.0.0.0/255.0.0.0 port = ssh to 192.168.0.0/255.255.0.0 port = 6668 keep state
+@1 block in proto tcp from 10.0.0.0/255.0.0.0 port = ssh to 192.168.0.0/255.255.0.0 port = 6667 keep state