Test invalid conditions in rdr-anchor and binat-anchor.

2 files changed, 23 insertions, 0 deletions

diff --git a/regress/sbin/pfctl/pfail24.in b/regress/sbin/pfctl/pfail24.in
new file mode 100644
index 00000000000..dea06b53d9e
--- /dev/null
+++ b/regress/sbin/pfctl/pfail24.in
@@ -0,0 +1,11 @@
+rdr-anchor test1 proto udp from port 80 to any
+rdr-anchor test2 proto udp to port { 80, 22 }
+rdr-anchor test3 proto tcp from port www 
+rdr-anchor test4 proto tcp from any to port { www, ssh }
+rdr-anchor test5 proto udp to port != 80
+rdr-anchor test6 proto tcp from any to port >= ssh
+binat-anchor test7 proto { tcp, udp } 
+binat-anchor test8 from 127.0.0.1 to any
+binat-anchor test9 to localhost 
+binat-anchor test10 from any port 23 to any
+binat-anchor test11 from any to port { telnet, ssh }
diff --git a/regress/sbin/pfctl/pfail24.ok b/regress/sbin/pfctl/pfail24.ok
new file mode 100644
index 00000000000..f12590db67c
--- /dev/null
+++ b/regress/sbin/pfctl/pfail24.ok
@@ -0,0 +1,12 @@
+stdin:1: source port parameter not supported in rdr-anchor
+stdin:2: destination port list expansion not supported in rdr-anchor
+stdin:3: source port parameter not supported in rdr-anchor
+stdin:4: destination port list expansion not supported in rdr-anchor
+stdin:5: destination port operators not supported in rdr-anchor
+stdin:6: destination port operators not supported in rdr-anchor
+stdin:7: proto list expansion not supported in binat-anchor
+stdin:8: fromto parameter not supported in binat-anchor
+stdin:9: fromto parameter not supported in binat-anchor
+stdin:10: fromto parameter not supported in binat-anchor
+stdin:11: fromto parameter not supported in binat-anchor
+pfctl: Syntax error in file: pf rules not loaded