summaryrefslogtreecommitdiff
path: root/regress/sbin
AgeCommit message (Expand)Author
2009-09-02convert a bunch of rdr/nat rules to the new syntaxJonathan Gray
2009-08-04Add regress tests with IPv4 and IPv6 addresses for the srcid and/or dstid.Joel Sing
2009-06-30add "-o none" to pfctl call to prevent automatic table creation ofDavid Krause
2009-06-30update after the "reassemble tcp" fix (kernel/6178); ok sthen@David Krause
2009-06-24fix this regression test; "reassemble tcp" should be in this locationStuart Henderson
2009-05-14handle the new require-order default of "no" in existing tests, and addStuart Henderson
2009-04-26- check equality with '==', from skreuzer@exit2shell.comOkan Demirmen
2009-04-06more scrub scrubbingHenning Brauer
2009-04-06scrub goneHenning Brauer
2009-01-30If the "peer" address is not specified or derived from "to" forAlexander Bluhm
2009-01-29Remove ikefail10 ipsecctl regression test as it always fails. ItAlexander Bluhm
2009-01-28Allow to specify ike and flow explicitly without peer. The anyAlexander Bluhm
2009-01-20Regression tests for source flow NAT support.Marco Pfatschbacher
2009-01-19Do not use "egress" keyword as it expands to an actual interface,Hans-Joerg Hoexer
2008-12-22add regression test for aes-{128,192,256} being used with main and quickHans-Joerg Hoexer
2008-12-22Adopt to recent change: /32 now is treated as a network address.Hans-Joerg Hoexer
2008-10-19The optional table counters added a field to the verboseMarco Pfatschbacher
2008-10-19vmstat(8) now reports "InUse" instead of "Releases".Marco Pfatschbacher
2008-07-01Isakmpd acquire mode did not work with a config generated fromAlexander Bluhm
2008-07-01If multiple to addresses but no peer are given in an ike or flowAlexander Bluhm
2008-06-16fix regress after scrub TOS and tagging additions; "commit it" henning@David Krause
2008-05-09convert port byte order in the production; add port keyword; ok deraadt@Markus Friedl
2008-05-09divert packets to local socket without modifying the ip header;Markus Friedl
2008-05-08Add/Fix regression tests for sequences of numbers and stackedMarco Pfatschbacher
2008-05-07scrub packets based on tags; ok henningMarkus Friedl
2008-05-07allow setting TOS with scrub; ok mcbride, claudioMarkus Friedl
2008-04-21Test for blank lines and comments between and inline anchor and its rules.Ryan Thomas McBride
2008-02-01Add regress test for anchors matching on filter_opts.Ryan Thomas McBride
2008-01-04Add a regression test for handling addresses with trailing '/32' and addressHans-Joerg Hoexer
2007-11-25more existant -> existent, from Martynas Venckus;Jason McIntyre
2007-10-15Add new "reached end of file while parsing quoted string" as expectedHans-Joerg Hoexer
2007-10-14regression test for include directive (if anyone has a better way to doTheo de Raadt
2007-10-13we decided numbers used as strings is wrongTheo de Raadt
2007-09-23Allow numbers to be used as unquoted strings again.Marco Pfatschbacher
2007-09-19Fix and re-enable tests for interface->address translation.Marco Pfatschbacher
2007-09-19Add a few "flags any" and "no state" to have the rulesetsMarco Pfatschbacher
2007-09-19pfctl seems to report errors when accessing empty tables,Marco Pfatschbacher
2007-09-19"flags S/SA keep state" is the default nowMarco Pfatschbacher
2007-09-19Adopt 14 altq tests to the change of the queue output format.Marco Pfatschbacher
2007-09-19This got broken when a second pool (pfrkentry2) was addedMarco Pfatschbacher
2007-09-19Remove "localhost" from the table test, since the result is dependentMarco Pfatschbacher
2007-08-30regress test address rangesDaniel Hartmeier
2007-07-03both 'proto 50' and 'proto esp' must work in flow specificationsMarkus Friedl
2007-06-20Allow "log" for nat rules without "pass".Marco Pfatschbacher
2007-05-19detect if newfs fails and add an extra test (amd64 floppy)Otto Moerbeek
2007-05-10Do not crash when lists include the "any" keyword. Reported byHans-Joerg Hoexer
2007-05-02now that optimization is on by default, fix the regress tests byDavid Krause
2007-04-18some newfs checks, not hooked in, because it needs certain disktabOtto Moerbeek
2007-03-16move autodetection of the ID type to the parser. this way theMarkus Friedl
2007-03-14We switched to aes cbc quite some time ago, so also use the correctHans-Joerg Hoexer