summaryrefslogtreecommitdiff
path: root/regress/sbin
AgeCommit message (Expand)Author
2009-01-30If the "peer" address is not specified or derived from "to" forAlexander Bluhm
2009-01-29Remove ikefail10 ipsecctl regression test as it always fails. ItAlexander Bluhm
2009-01-28Allow to specify ike and flow explicitly without peer. The anyAlexander Bluhm
2009-01-20Regression tests for source flow NAT support.Marco Pfatschbacher
2009-01-19Do not use "egress" keyword as it expands to an actual interface,Hans-Joerg Hoexer
2008-12-22add regression test for aes-{128,192,256} being used with main and quickHans-Joerg Hoexer
2008-12-22Adopt to recent change: /32 now is treated as a network address.Hans-Joerg Hoexer
2008-10-19The optional table counters added a field to the verboseMarco Pfatschbacher
2008-10-19vmstat(8) now reports "InUse" instead of "Releases".Marco Pfatschbacher
2008-07-01Isakmpd acquire mode did not work with a config generated fromAlexander Bluhm
2008-07-01If multiple to addresses but no peer are given in an ike or flowAlexander Bluhm
2008-06-16fix regress after scrub TOS and tagging additions; "commit it" henning@David Krause
2008-05-09convert port byte order in the production; add port keyword; ok deraadt@Markus Friedl
2008-05-09divert packets to local socket without modifying the ip header;Markus Friedl
2008-05-08Add/Fix regression tests for sequences of numbers and stackedMarco Pfatschbacher
2008-05-07scrub packets based on tags; ok henningMarkus Friedl
2008-05-07allow setting TOS with scrub; ok mcbride, claudioMarkus Friedl
2008-04-21Test for blank lines and comments between and inline anchor and its rules.Ryan Thomas McBride
2008-02-01Add regress test for anchors matching on filter_opts.Ryan Thomas McBride
2008-01-04Add a regression test for handling addresses with trailing '/32' and addressHans-Joerg Hoexer
2007-11-25more existant -> existent, from Martynas Venckus;Jason McIntyre
2007-10-15Add new "reached end of file while parsing quoted string" as expectedHans-Joerg Hoexer
2007-10-14regression test for include directive (if anyone has a better way to doTheo de Raadt
2007-10-13we decided numbers used as strings is wrongTheo de Raadt
2007-09-23Allow numbers to be used as unquoted strings again.Marco Pfatschbacher
2007-09-19Fix and re-enable tests for interface->address translation.Marco Pfatschbacher
2007-09-19Add a few "flags any" and "no state" to have the rulesetsMarco Pfatschbacher
2007-09-19pfctl seems to report errors when accessing empty tables,Marco Pfatschbacher
2007-09-19"flags S/SA keep state" is the default nowMarco Pfatschbacher
2007-09-19Adopt 14 altq tests to the change of the queue output format.Marco Pfatschbacher
2007-09-19This got broken when a second pool (pfrkentry2) was addedMarco Pfatschbacher
2007-09-19Remove "localhost" from the table test, since the result is dependentMarco Pfatschbacher
2007-08-30regress test address rangesDaniel Hartmeier
2007-07-03both 'proto 50' and 'proto esp' must work in flow specificationsMarkus Friedl
2007-06-20Allow "log" for nat rules without "pass".Marco Pfatschbacher
2007-05-19detect if newfs fails and add an extra test (amd64 floppy)Otto Moerbeek
2007-05-10Do not crash when lists include the "any" keyword. Reported byHans-Joerg Hoexer
2007-05-02now that optimization is on by default, fix the regress tests byDavid Krause
2007-04-18some newfs checks, not hooked in, because it needs certain disktabOtto Moerbeek
2007-03-16move autodetection of the ID type to the parser. this way theMarkus Friedl
2007-03-14We switched to aes cbc quite some time ago, so also use the correctHans-Joerg Hoexer
2007-02-19add a test for null encryptionHans-Joerg Hoexer
2007-02-19we have to use '-k' now to show keys.Hans-Joerg Hoexer
2007-02-19previous commit to parse.y was undone. adopt these two regression tests.Hans-Joerg Hoexer
2007-02-16Adopt to recent change in parse.y (do not accept '\n' in quotedHans-Joerg Hoexer
2007-01-10allow rule if there is at least _one_ matching address family combination.Markus Friedl
2007-01-04don't pass -1 as a netmask; report vicviq at gmail.comMarkus Friedl
2006-11-30wrong rid for protocolMarkus Friedl
2006-11-30sync: rmv to unregister ipsec connectionsMarkus Friedl
2006-11-30sync: proto/port in lid/rid/connectionMarkus Friedl