| Age | Commit message (Collapse) | Author | |
|---|---|---|---|
| 2002-09-02 | Rename a bunch of the old bsd.regress.mk variables into the new ones. | Anil Madhavapeddy | |
| ok art@ | |||
| 2002-07-30 | negative regression test for flags handling | Henning Brauer | |
| 2002-07-30 | positive regression test for flag handling | Henning Brauer | |
| 2002-07-26 | swap log and quick a few times | Henning Brauer | |
| 2002-07-21 | test missing comma | Theo de Raadt | |
| 2002-07-20 | two more from henning | Theo de Raadt | |
| 2002-07-20 | adapt to new dup-to syntax | Theo de Raadt | |
| 2002-07-20 | use diff nicer | Theo de Raadt | |
| 2002-07-16 | Add nat_consistent() and rdr_consistent() for checks that should occur | Daniel Hartmeier | |
| after rule expansion, similar to rule_consistent(). Fixes the non-effective test for rdr rules for non-TCP/UDP protocols with ports, found by mpech@, ok frantzen@ | |||
| 2002-07-15 | test "on ! interface" | Henning Brauer | |
| 2002-07-15 | o don't use keep state on block rules | Henning Brauer | |
| o don't use return-rst on not-tcp rules | |||
| 2002-07-13 | regression test for interface and proto list expansion in nat rules | Henning Brauer | |
| 2002-07-09 | the new interface-to-ip lookup fuctions requires the address family to be | Henning Brauer | |
| specified in this cases. ok pb@, dhartmei@, kjell@ | |||
| 2002-07-08 | Don't allow 'flags' option in non-TCP rules, found by mpech@ | Daniel Hartmeier | |
| 2002-07-06 | theo doesn't like it. | Henning Brauer | |
| always use the pfctl in path. | |||
| 2002-07-06 | use sbin/pfctl/${__objdir}/pfctl for regression tests if existant, fall | Henning Brauer | |
| back to pfctl in path otherwise. will save my ass sooner or later. ok millert@, pb@ | |||
| 2002-06-25 | regression tests for options in pf.conf | Henning Brauer | |
| ok dhartmei@, kjell@ | |||
| 2002-06-24 | scrub on <if> works now, update regress tests. | Daniel Hartmeier | |
| 2002-06-13 | Scrub rules are now numbered properly. my bad. ok frantzen@ | Kjell Wooding | |
| 2002-06-11 | turn on pf21 | Mike Frantzen | |
| 2002-06-11 | test scrub fragment {reassemble|crop|drop-ovl} modifiers | Mike Frantzen | |
| 2002-06-11 | sync w/ default implicit "fragment reassemble" scrub modifier | Mike Frantzen | |
| 2002-06-11 | regression test for NATing to dynamic addresses ( nat ... -> (if) ) | Henning Brauer | |
| ok dhartmei@ | |||
| 2002-06-11 | Use merged config file format. The separate NAT loop can go away, | Kjell Wooding | |
| since all files are now loaded the same way. Add regress tests for invalid ordering of scrub, nat, filter rules | |||
| 2002-06-10 | Add regression tests for scrub | Kjell Wooding | |
| 2002-06-09 | Add regression tests for rdr list processing | Kjell Wooding | |
| 2002-06-08 | Add regression tests for NAT list expansion | Kjell Wooding | |
| 2002-06-08 | no macro concatenation via += | Henning Brauer | |
| 2002-06-08 | regression test for macro concatenation | Henning Brauer | |
| ok dhartmei@ | |||
| 2002-06-08 | explicitely set inet for localhost and lo0 tests, test would fail if | Henning Brauer | |
| localhost resolves to ::1 ok dhartmei@ | |||
| 2002-06-08 | regression test from $srcaddr & friends in rule labels | Henning Brauer | |
| ok dhartmei@ | |||
| 2002-06-07 | whoops. turn on the IPv6 scope test | Mike Frantzen | |
| 2002-06-07 | regress test IPv6 scopes | Mike Frantzen | |
| 2002-06-01 | Update tests to reflect ECN support. | Hugh Graham | |
| 2002-04-24 | Add dynamic (in-kernel) interface name -> address translation. Instead of | Daniel Hartmeier | |
| using just the interface name instead of an address and reloading the rule set whenever the interface changes its address, the interface name can be put in parentheses, and the kernel will keep track of changes and update rules. There is no additional cost for evaluating rules (per packet), the cost occurs when an interface changes address (and the rules are traversed and updated where necessary). | |||
| 2002-03-27 | implement a "no-route" keyword. | Michael Shalayeff | |
| usage semantics are analogous w/ "any", meaning is "any ip address for which there is no route in the current routing table", could be used in both from and to. typical usage would be (assuming symmetrical routing): block in from no-route to any also doc "any" in the pf.conf.5, include in regress, etc. tested by me on i386 and sparc. dhartmei@ and frantzen@ ok | |||
| 2002-02-27 | And adjust regress tests to match the rule number output. | Daniel Hartmeier | |
| 2002-02-23 | no more need to explicitly specify regress: _SUBDIRUSE targets anymore. | Artur Grabowski | |
| XXX - what about the install targets? | |||
| 2002-02-18 | Clean up. | Artur Grabowski | |
| - Don't print failure and return succes, shut up and fail properly. - Don't generate reults once and rerun compares later. Rerun every time. - Don't generate any files, pipes are there to be used. | |||
| 2002-01-09 | Add tests for 'no' translation rules and 'label' in filter rules. | Daniel Hartmeier | |
| 2002-01-01 | trivial conversions to bsd.regress.mk | Artur Grabowski | |
| 2001-11-26 | add tests for fastroute options | jasoni | |
| 2001-11-13 | Use more common interface names like lo0, tun0, enc0 for regress tests, | Daniel Hartmeier | |
| so they run anywhere. From jason@. | |||
| 2001-10-15 | Add 'allow-opts' to rules. Packets with IP options will be blocked by | Daniel Hartmeier | |
| default now, and can be allowed per rule. ok deraadt@ | |||
| 2001-10-07 | Add interface name to address translation to pfctl, document it and add | Daniel Hartmeier | |
| a regress test. Translation is done on rule set load-time only, so the rule sets must be reloaded when an interface address changes. parse.y patch from Cedric Berger. Similar patch from Jonathon Fletcher. Thanks to both. | |||
| 2001-10-01 | sync with support for underscores in macro names | Markus Friedl | |
| 2001-09-15 | sync ICMP6_DST_UNREACH_NOROUTE <-> _ADMIN | Peter Stromberg | |
| 2001-09-15 | return-icmp / icmp-type tests, ok dhartmei@ | Peter Stromberg | |
| 2001-09-15 | Update regress tests. Some input syntax has changed (inet/inet6) as well | Daniel Hartmeier | |
| as some output format (netmasks, inet/inet6, return-icmp). | |||
| 2001-09-06 | add test for binat | jasoni | |
 |
index : src | |
| OpenBSD base system |
| summaryrefslogtreecommitdiff |