| Age | Commit message (Collapse) | Author | |
|---|---|---|---|
| 2002-06-25 | regression tests for options in pf.conf | Henning Brauer | |
| ok dhartmei@, kjell@ | |||
| 2002-06-24 | scrub on <if> works now, update regress tests. | Daniel Hartmeier | |
| 2002-06-13 | Scrub rules are now numbered properly. my bad. ok frantzen@ | Kjell Wooding | |
| 2002-06-11 | turn on pf21 | Mike Frantzen | |
| 2002-06-11 | test scrub fragment {reassemble|crop|drop-ovl} modifiers | Mike Frantzen | |
| 2002-06-11 | sync w/ default implicit "fragment reassemble" scrub modifier | Mike Frantzen | |
| 2002-06-11 | regression test for NATing to dynamic addresses ( nat ... -> (if) ) | Henning Brauer | |
| ok dhartmei@ | |||
| 2002-06-11 | Use merged config file format. The separate NAT loop can go away, | Kjell Wooding | |
| since all files are now loaded the same way. Add regress tests for invalid ordering of scrub, nat, filter rules | |||
| 2002-06-10 | Add regression tests for scrub | Kjell Wooding | |
| 2002-06-09 | Add regression tests for rdr list processing | Kjell Wooding | |
| 2002-06-08 | Add regression tests for NAT list expansion | Kjell Wooding | |
| 2002-06-08 | no macro concatenation via += | Henning Brauer | |
| 2002-06-08 | regression test for macro concatenation | Henning Brauer | |
| ok dhartmei@ | |||
| 2002-06-08 | explicitely set inet for localhost and lo0 tests, test would fail if | Henning Brauer | |
| localhost resolves to ::1 ok dhartmei@ | |||
| 2002-06-08 | regression test from $srcaddr & friends in rule labels | Henning Brauer | |
| ok dhartmei@ | |||
| 2002-06-07 | whoops. turn on the IPv6 scope test | Mike Frantzen | |
| 2002-06-07 | regress test IPv6 scopes | Mike Frantzen | |
| 2002-06-01 | Update tests to reflect ECN support. | Hugh Graham | |
| 2002-04-24 | Add dynamic (in-kernel) interface name -> address translation. Instead of | Daniel Hartmeier | |
| using just the interface name instead of an address and reloading the rule set whenever the interface changes its address, the interface name can be put in parentheses, and the kernel will keep track of changes and update rules. There is no additional cost for evaluating rules (per packet), the cost occurs when an interface changes address (and the rules are traversed and updated where necessary). | |||
| 2002-03-27 | implement a "no-route" keyword. | Michael Shalayeff | |
| usage semantics are analogous w/ "any", meaning is "any ip address for which there is no route in the current routing table", could be used in both from and to. typical usage would be (assuming symmetrical routing): block in from no-route to any also doc "any" in the pf.conf.5, include in regress, etc. tested by me on i386 and sparc. dhartmei@ and frantzen@ ok | |||
| 2002-02-27 | And adjust regress tests to match the rule number output. | Daniel Hartmeier | |
| 2002-02-23 | no more need to explicitly specify regress: _SUBDIRUSE targets anymore. | Artur Grabowski | |
| XXX - what about the install targets? | |||
| 2002-02-18 | Clean up. | Artur Grabowski | |
| - Don't print failure and return succes, shut up and fail properly. - Don't generate reults once and rerun compares later. Rerun every time. - Don't generate any files, pipes are there to be used. | |||
| 2002-01-09 | Add tests for 'no' translation rules and 'label' in filter rules. | Daniel Hartmeier | |
| 2002-01-01 | trivial conversions to bsd.regress.mk | Artur Grabowski | |
| 2001-11-26 | add tests for fastroute options | jasoni | |
| 2001-11-13 | Use more common interface names like lo0, tun0, enc0 for regress tests, | Daniel Hartmeier | |
| so they run anywhere. From jason@. | |||
| 2001-10-15 | Add 'allow-opts' to rules. Packets with IP options will be blocked by | Daniel Hartmeier | |
| default now, and can be allowed per rule. ok deraadt@ | |||
| 2001-10-07 | Add interface name to address translation to pfctl, document it and add | Daniel Hartmeier | |
| a regress test. Translation is done on rule set load-time only, so the rule sets must be reloaded when an interface address changes. parse.y patch from Cedric Berger. Similar patch from Jonathon Fletcher. Thanks to both. | |||
| 2001-10-01 | sync with support for underscores in macro names | Markus Friedl | |
| 2001-09-15 | sync ICMP6_DST_UNREACH_NOROUTE <-> _ADMIN | Peter Stromberg | |
| 2001-09-15 | return-icmp / icmp-type tests, ok dhartmei@ | Peter Stromberg | |
| 2001-09-15 | Update regress tests. Some input syntax has changed (inet/inet6) as well | Daniel Hartmeier | |
| as some output format (netmasks, inet/inet6, return-icmp). | |||
| 2001-09-06 | add test for binat | jasoni | |
| 2001-09-04 | Add regress test for "on { if, if }" syntax. | Daniel Hartmeier | |
| 2001-09-03 | sync with output format changes (pfctl) | Markus Friedl | |
| 2001-08-28 | move '!' from host_list to host: "xhost : '!' host | host;"; ok dhartmei@ | Markus Friedl | |
| 2001-08-25 | PF ISN randomization. Or in trekkie techno-babble, ISN phase modulation. | Mike Frantzen | |
| 2001-08-23 | new tests | Theo de Raadt | |
| 2001-08-19 | Regress test for parameter list expansion syntax. | Daniel Hartmeier | |
| 2001-08-01 | enable regress for sbin/pfctl | Markus Friedl | |
| 2001-07-31 | allow to test that flags are unset, ok dhartmei@, mickey@ | Peter Stromberg | |
| 2001-07-26 | initial tests for the pfctl parser | Markus Friedl | |
 |
index : src | |
| OpenBSD base system |
| summaryrefslogtreecommitdiff |