summaryrefslogtreecommitdiff
path: root/regress/sbin/pfctl
AgeCommit message (Collapse)Author
2024-08-23Remove unwanted trailing newlines from err/warn format strings.Anton Lindqvist
2022-03-23Ensure that pf regress anchor exists before clearing it.Alexander Bluhm
2021-11-12honor objdirAnton Lindqvist
2021-11-11add tests to cover DIOCCHANGERULE ioctl(2)Alexandr Nedvedicky
OK bluhm@
2021-10-25- add regression tests for pfctl '$rn' macro expansionAlexandr Nedvedicky
OK @bluhm
2021-09-17add missing sudoAnton Lindqvist
2021-02-11More route-to fallout in pfctl regress.Alexander Bluhm
2021-02-07route-to rules take ips, not interfaces with optional ips.David Gwynne
another gentle reminder by bluhm@ who pointed out i missed some
2021-02-07i missed a dup-to when tweaking route-to things to takes ips, not ifaces.David Gwynne
gentle reminded by bluhm@
2021-02-04it's fine to route-to to a table.David Gwynne
i think this should have been tweaked a while back.
2021-02-04route-to rules take ips now, not interfaces with optional ips.David Gwynne
reminded by bluhm@
2021-02-04route-to rules take ips, not interfaces with optional ips.David Gwynne
reminded by bluhm@
2021-02-04route-to rules take an ip now, not an interface with optional ip.David Gwynne
they now also only work on keep state rules, so there's even more errors from the parser to expect. reminded by bluhm@
2020-10-06Fix "rtable N" checkkn
pfctl parse.y r.1702 enforced rtables to exist at ruleset creation time but rtable 7 does not exist (this regress only tests the parser), so use 0. Spotted by tb.
2018-07-28Use strtonum in host()kn
This is simpler than checking three cases for `q' and gives nicer error messages. While here, use `v6mask' as maximum netmask instead of hardcoding it. OK sashan
2018-07-11Some spaces have been removed from pfctl print. Adapt expectedAlexander Bluhm
output in regress.
2017-12-12Fix pfloadanchors tests when running with obj directory.Alexander Bluhm
Remove unused file.
2017-11-29Test invalid divert combinations and adapt error messages.Alexander Bluhm
2017-11-29- regression tests for 'load anchor ... from ...'Alexandr Nedvedicky
the test case itself comes from Leonardo Guardati
2017-11-24Use the environment variable PFCTL to specify a different executableAlexander Bluhm
for testing. Default is /sbin/pfctl. This makes test driven development easier.
2017-08-13actually add the files needed by my test. noted by bluhm@, thxSebastian Benoit
2017-08-11add option -N (no domain resolution)Sebastian Benoit
manpage wording and reminder about usage() jmc@ ok florian@ henning@
2017-08-07In pf.conf the icmp6-type notnbr-unr has been renamed to beyond-unr.Alexander Bluhm
Adapt regress test.
2017-07-20Fixup pf109.ok and rewrite pf110Mike Belopuhov
2017-07-19Regression tests asserting various HFSC and FQ-CoDel functionalityMike Belopuhov
2017-07-15regress/sbin/pfctl - use -n for pfcmd groupAdam Wolk
Passing in the -n which just results in the rules being parsed. The definition for the pfctlcmd testing group in the Makefile is: # pfcmd: test pfctl command line parsing This test passeed only because pfctl didn't exit with an error when it was asked to clear tables from a non existing anchor. with the -n flag we still test if the anchor command can be combined with -Fa but don't actually attempt to run the clearing code. OK mikeb@, sashan@
2017-07-07Remove all references to "make depend" from regress.Alexander Bluhm
2016-11-23Test that af-to cannot be used together with route-to, reply-to, dup-to.Alexander Bluhm
2016-09-30also copy pf103.include to obj dirOtto Moerbeek
2016-09-01no route-to/reply-to/dup-to on block rules, aka make this pass againHenning Brauer
triggered by bluhm's *meep, secret*
2015-09-03revert previous since the v6 address order has been restoredMike Belopuhov
2015-09-03route-to, reply-to and dup-to are no longer supported on block rulesMike Belopuhov
2015-09-03order of assigned v6 addresses has slightly changedMike Belopuhov
2015-09-03sync to reflect changes in pfctl_parser.c -r1.305Mike Belopuhov
2015-05-19Test divert-to rules' address handling (pfctl/parse.y -r1.648)Mike Belopuhov
2014-11-13keep queues around when anchors are being loadedMartin Pelikan
ok mikeb
2014-10-28add a regression test for the pfctl parser bug recently fixed bySebastian Benoit
mikeb@ in pfctl/parse.y rev 1.641. with feedback from mikeb sthen and henning
2014-08-23when you specify queues in a rule, make sure they have been defined.Martin Pelikan
DIOCADDRULE EBUSY turns into an error message that pfctl -n catches. DIOCXCOMMIT EINVAL after the kernel rejected the rules was reported to occur, possibly from hfsc.c: this should be fixed as well. ok henning mikeb sthen
2014-06-25Explicitely specify address family when translation pool may containMike Belopuhov
addresses of different address families.
2014-06-24Fixup the test after new queue code has been added.Mike Belopuhov
You can't load a ruleset with undefined queues into the anchor. Change the test to use "set prio" since the whole purpose of it is to test the flexibility of the pf.conf language, not a particular queue feature.
2014-04-18missed theseHenning Brauer
2014-04-18stop testing altq stuffzHenning Brauer
how many tests I wrote back then... (of which the majority is pointless)
2013-10-12adopt existing altq regress to queueing changes; queuespecs for altq useHenning Brauer
"oldqueue" as keyword for the transition phase
2013-08-02fixup set prio falloutMike Belopuhov
2013-08-02extra skip step and counters printout fixed by the recent pfctl changeMike Belopuhov
2013-08-02fixup set prio falloutMike Belopuhov
2013-08-02update pfail32.ok: it's failiing in a much better way now; ok henningMike Belopuhov
2013-08-01more set queue fallout fixupsMike Belopuhov
2013-07-31fixup pfctl regress fallout from the "set tos" and "set queue" changesMike Belopuhov
2012-10-20pf.conf "prio" syntax was changed (2012/07/09); adapt pfctl regress tests.Stuart Henderson
ok henning@ prio X -> set prio X prio (X Y) -> set prio (X Y)