summaryrefslogtreecommitdiff
path: root/regress/sbin/pfctl/pf12.ok
AgeCommit message (Collapse)Author
2006-10-17'flags S/SA' not implicit if the rule is stateless.Ryan Thomas McBride
2006-10-06Handle default 'flags S/SA keep state', 'no state' and 'flags any'.Ryan Thomas McBride
2003-07-29Big SyncCedric Berger
2002-12-05no more rule numbers in outputHenning Brauer
2002-10-22Update for new semantics of set_ipmask (netmask is applied immediatelyCamiel Dobbelaar
to an address by pfctl).
2002-04-24Add dynamic (in-kernel) interface name -> address translation. Instead ofDaniel Hartmeier
using just the interface name instead of an address and reloading the rule set whenever the interface changes its address, the interface name can be put in parentheses, and the kernel will keep track of changes and update rules. There is no additional cost for evaluating rules (per packet), the cost occurs when an interface changes address (and the rules are traversed and updated where necessary).
2002-02-27And adjust regress tests to match the rule number output.Daniel Hartmeier
2001-10-07Add interface name to address translation to pfctl, document it and addDaniel Hartmeier
a regress test. Translation is done on rule set load-time only, so the rule sets must be reloaded when an interface address changes. parse.y patch from Cedric Berger. Similar patch from Jonathon Fletcher. Thanks to both.