Age | Commit message (Collapse) | Author | |
---|---|---|---|
2002-03-27 | implement a "no-route" keyword. | Michael Shalayeff | |
usage semantics are analogous w/ "any", meaning is "any ip address for which there is no route in the current routing table", could be used in both from and to. typical usage would be (assuming symmetrical routing): block in from no-route to any also doc "any" in the pf.conf.5, include in regress, etc. tested by me on i386 and sparc. dhartmei@ and frantzen@ ok | |||
2002-02-27 | And adjust regress tests to match the rule number output. | Daniel Hartmeier | |
2002-02-23 | no more need to explicitly specify regress: _SUBDIRUSE targets anymore. | Artur Grabowski | |
XXX - what about the install targets? | |||
2002-02-18 | Clean up. | Artur Grabowski | |
- Don't print failure and return succes, shut up and fail properly. - Don't generate reults once and rerun compares later. Rerun every time. - Don't generate any files, pipes are there to be used. | |||
2002-01-09 | Add tests for 'no' translation rules and 'label' in filter rules. | Daniel Hartmeier | |
2002-01-01 | trivial conversions to bsd.regress.mk | Artur Grabowski | |
2001-11-26 | add tests for fastroute options | jasoni | |
2001-11-13 | Use more common interface names like lo0, tun0, enc0 for regress tests, | Daniel Hartmeier | |
so they run anywhere. From jason@. | |||
2001-10-15 | Add 'allow-opts' to rules. Packets with IP options will be blocked by | Daniel Hartmeier | |
default now, and can be allowed per rule. ok deraadt@ | |||
2001-10-07 | Add interface name to address translation to pfctl, document it and add | Daniel Hartmeier | |
a regress test. Translation is done on rule set load-time only, so the rule sets must be reloaded when an interface address changes. parse.y patch from Cedric Berger. Similar patch from Jonathon Fletcher. Thanks to both. | |||
2001-10-01 | sync with support for underscores in macro names | Markus Friedl | |
2001-09-15 | sync ICMP6_DST_UNREACH_NOROUTE <-> _ADMIN | Peter Stromberg | |
2001-09-15 | return-icmp / icmp-type tests, ok dhartmei@ | Peter Stromberg | |
2001-09-15 | Update regress tests. Some input syntax has changed (inet/inet6) as well | Daniel Hartmeier | |
as some output format (netmasks, inet/inet6, return-icmp). | |||
2001-09-06 | add test for binat | jasoni | |
2001-09-04 | Add regress test for "on { if, if }" syntax. | Daniel Hartmeier | |
2001-09-03 | sync with output format changes (pfctl) | Markus Friedl | |
2001-08-28 | move '!' from host_list to host: "xhost : '!' host | host;"; ok dhartmei@ | Markus Friedl | |
2001-08-25 | PF ISN randomization. Or in trekkie techno-babble, ISN phase modulation. | Mike Frantzen | |
2001-08-23 | new tests | Theo de Raadt | |
2001-08-19 | Regress test for parameter list expansion syntax. | Daniel Hartmeier | |
2001-08-01 | enable regress for sbin/pfctl | Markus Friedl | |
2001-07-31 | allow to test that flags are unset, ok dhartmei@, mickey@ | Peter Stromberg | |
2001-07-26 | initial tests for the pfctl parser | Markus Friedl | |