summaryrefslogtreecommitdiff
path: root/regress/sbin
diff options
context:
space:
mode:
Diffstat (limited to 'regress/sbin')
-rw-r--r--regress/sbin/pfctl/pf13.in6
-rw-r--r--regress/sbin/pfctl/pf13.loaded22
-rw-r--r--regress/sbin/pfctl/pf13.ok4
3 files changed, 29 insertions, 3 deletions
diff --git a/regress/sbin/pfctl/pf13.in b/regress/sbin/pfctl/pf13.in
index 025a8d0f66d..3ec22f59cc1 100644
--- a/regress/sbin/pfctl/pf13.in
+++ b/regress/sbin/pfctl/pf13.in
@@ -12,5 +12,11 @@ block in on tun0 dup-to (tun1 fec0::1) proto tcp from any to any port = 21
pass in quick on tun0 route-to tun1 from 192.168.1.1/32 to 10.1.1.1/32
pass in quick on tun0 route-to tun1 from fec0::1/64 to fec1::2/128
+block in on tun0 reply-to (tun1 192.168.1.1) proto tcp from any to any port = 21
+block in on tun0 reply-to (tun1 fec0::1) proto tcp from any to any port = 21
+
+pass in quick on tun0 reply-to tun1 from 192.168.1.1/32 to 10.1.1.1/32
+pass in quick on tun0 reply-to tun1 from fec0::1/64 to fec1::2/128
+
pass in quick on tun0 dup-to (tun1 192.168.1.100) from 192.168.1.1/32 to 10.1.1.1/32
pass in quick on tun0 dup-to (tun1 fec1::2) from fec0::1/64 to fec1::2/128
diff --git a/regress/sbin/pfctl/pf13.loaded b/regress/sbin/pfctl/pf13.loaded
index 729ef3da601..87d6ed6d82e 100644
--- a/regress/sbin/pfctl/pf13.loaded
+++ b/regress/sbin/pfctl/pf13.loaded
@@ -31,18 +31,34 @@
[ Evaluations: 0 Packets: 0 Bytes: 0 States: 0 ]
@8 pass in quick on tun0 route-to tun1 inet from 192.168.1.1 to 10.1.1.1
-[ Skip steps: a=end i=end d=end p=end sp=end dp=end ]
+[ Skip steps: a=end i=end d=end p=10 sp=end dp=10 ]
[ Evaluations: 0 Packets: 0 Bytes: 0 States: 0 ]
@9 pass in quick on tun0 route-to tun1 inet6 from fec0::/64 to fec1::2
+[ Skip steps: a=end i=end d=end sp=end ]
+[ Evaluations: 0 Packets: 0 Bytes: 0 States: 0 ]
+
+@10 block drop in on tun0 reply-to (tun1 192.168.1.1) inet proto tcp from any to any port = ftp
+[ Skip steps: a=end i=end d=end p=12 sa=12 sp=end da=12 dp=12 ]
+[ Evaluations: 0 Packets: 0 Bytes: 0 States: 0 ]
+
+@11 block drop in on tun0 reply-to (tun1 fec0::1) inet6 proto tcp from any to any port = ftp
+[ Skip steps: a=end i=end d=end sp=end ]
+[ Evaluations: 0 Packets: 0 Bytes: 0 States: 0 ]
+
+@12 pass in quick on tun0 reply-to tun1 inet from 192.168.1.1 to 10.1.1.1
+[ Skip steps: a=end i=end d=end p=end sp=end dp=end ]
+[ Evaluations: 0 Packets: 0 Bytes: 0 States: 0 ]
+
+@13 pass in quick on tun0 reply-to tun1 inet6 from fec0::/64 to fec1::2
[ Skip steps: a=end i=end d=end p=end sp=end dp=end ]
[ Evaluations: 0 Packets: 0 Bytes: 0 States: 0 ]
-@10 pass in quick on tun0 dup-to (tun1 192.168.1.100) inet from 192.168.1.1 to 10.1.1.1
+@14 pass in quick on tun0 dup-to (tun1 192.168.1.100) inet from 192.168.1.1 to 10.1.1.1
[ Skip steps: a=end i=end d=end p=end sp=end dp=end ]
[ Evaluations: 0 Packets: 0 Bytes: 0 States: 0 ]
-@11 pass in quick on tun0 dup-to (tun1 fec1::2) inet6 from fec0::/64 to fec1::2
+@15 pass in quick on tun0 dup-to (tun1 fec1::2) inet6 from fec0::/64 to fec1::2
[ Skip steps: a=end i=end d=end f=end p=end sa=end sp=end da=end dp=end ]
[ Evaluations: 0 Packets: 0 Bytes: 0 States: 0 ]
diff --git a/regress/sbin/pfctl/pf13.ok b/regress/sbin/pfctl/pf13.ok
index 85e48745026..69780ee9157 100644
--- a/regress/sbin/pfctl/pf13.ok
+++ b/regress/sbin/pfctl/pf13.ok
@@ -8,5 +8,9 @@ block drop in on tun0 dup-to (tun1 192.168.1.1) inet proto tcp from any to any p
block drop in on tun0 dup-to (tun1 fec0::1) inet6 proto tcp from any to any port = ftp
pass in quick on tun0 route-to tun1 inet from 192.168.1.1 to 10.1.1.1
pass in quick on tun0 route-to tun1 inet6 from fec0::/64 to fec1::2
+block drop in on tun0 reply-to (tun1 192.168.1.1) inet proto tcp from any to any port = ftp
+block drop in on tun0 reply-to (tun1 fec0::1) inet6 proto tcp from any to any port = ftp
+pass in quick on tun0 reply-to tun1 inet from 192.168.1.1 to 10.1.1.1
+pass in quick on tun0 reply-to tun1 inet6 from fec0::/64 to fec1::2
pass in quick on tun0 dup-to (tun1 192.168.1.100) inet from 192.168.1.1 to 10.1.1.1
pass in quick on tun0 dup-to (tun1 fec1::2) inet6 from fec0::/64 to fec1::2