diff options
| author | Daniel Hartmeier <dhartmei@cvs.openbsd.org> | 2003-11-29 10:05:56 +0000 |
|---|---|---|
| committer | Daniel Hartmeier <dhartmei@cvs.openbsd.org> | 2003-11-29 10:05:56 +0000 |
| commit | 3d78df1b892943dfd1e2b6bb3ec0397627e1f572 (patch) | |
| tree | 6e305dd35b15c13bbc086df3a70df6ad51f15519 /sbin | |
| parent | 2ceccdba5a5ece6b062b138638884934766a20d9 (diff) | |
allow ':' (range including boundaries) to be used whereever '><' (range
excluding boundaries) is legal. already supported by kernel, requires only
removal of three error messages. ok henning@
Diffstat (limited to 'sbin')
| -rw-r--r-- | sbin/pfctl/parse.y | 15 |
1 files changed, 1 insertions, 14 deletions
diff --git a/sbin/pfctl/parse.y b/sbin/pfctl/parse.y index a03875dcad8..93a76bc77b3 100644 --- a/sbin/pfctl/parse.y +++ b/sbin/pfctl/parse.y @@ -1,4 +1,4 @@ -/* $OpenBSD: parse.y,v 1.423 2003/11/22 13:44:20 henning Exp $ */ +/* $OpenBSD: parse.y,v 1.424 2003/11/29 10:05:55 dhartmei Exp $ */ /* * Copyright (c) 2001 Markus Friedl. All rights reserved. @@ -3122,10 +3122,6 @@ filter_consistent(struct pf_rule *r) yyerror("port only applies to tcp/udp"); problems++; } - if (r->src.port_op == PF_OP_RRG || r->dst.port_op == PF_OP_RRG) { - yyerror("the ':' port operator only applies to rdr"); - problems++; - } if (r->proto != IPPROTO_ICMP && r->proto != IPPROTO_ICMPV6 && (r->type || r->code)) { yyerror("icmp-type/code only applies to icmp"); @@ -3185,10 +3181,6 @@ nat_consistent(struct pf_rule *r) int problems = 0; struct pf_pooladdr *pa; - if (r->src.port_op == PF_OP_RRG || r->dst.port_op == PF_OP_RRG) { - yyerror("the ':' port operator only applies to rdr"); - problems++; - } if (!r->af) { TAILQ_FOREACH(pa, &r->rpool.list, entries) { if (pa->addr.type == PF_ADDR_DYNIFTL) { @@ -3227,11 +3219,6 @@ rdr_consistent(struct pf_rule *r) yyerror("invalid port operator for rdr destination port"); problems++; } - if (r->src.port_op == PF_OP_RRG) { - yyerror("the ':' port operator only applies to rdr " - "destination port"); - problems++; - } if (!r->af) { if (r->src.addr.type == PF_ADDR_DYNIFTL || r->dst.addr.type == PF_ADDR_DYNIFTL) { |