Age | Commit message (Collapse) | Author |
|
OK florian@
|
|
|
|
|
|
|
|
another gentle reminder by bluhm@ who pointed out i missed some
|
|
gentle reminded by bluhm@
|
|
i think this should have been tweaked a while back.
|
|
reminded by bluhm@
|
|
reminded by bluhm@
|
|
they now also only work on keep state rules, so there's even more
errors from the parser to expect.
reminded by bluhm@
|
|
|
|
OK bluhm sthen
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
sa or policy state, this should help make it clearer.
ok patrick@
|
|
|
|
Use the "dynamic" keyword to see generate flows from/to dynamic address.
|
|
|
|
|
|
|
|
EC2N while we're at it.
|
|
Reported by patrick@
|
|
pfctl parse.y r.1702 enforced rtables to exist at ruleset creation time
but rtable 7 does not exist (this regress only tests the parser), so use 0.
Spotted by tb.
|
|
iked, so it should also be set in the test.
ok patrick@
|
|
in rtable 1. However, we can just query the already running one.
regress breakage pointed out by tb@
|
|
|
|
make(1) ignores them.
|
|
|
|
|
|
|
|
Return _ret from TEST_FLOWS to allow known-negative tests.
|
|
|
|
before running tests.
|
|
|
|
|
|
|
|
|
|
This is the name the other BSDs use for this, there is no reason to
be different, the IPv6 RFCs call these addresses temporary, and some
software in ports wants to use this as well.
Most recently pointed out for firefox by landry.
OK claudio, sthen
|
|
filesystems or ramdisks to use explicit -O 1; installer already does that.
ok sthen@
|
|
|
|
last CERTREQ a mismatch should trigger the fallback case, otherwise the
following CERTREQs are ignored.
ok markus@
|
|
SA modes (tunnel/transport), and flow types (IPcomp/ESP).
|
|
destination addresses.
|
|
|
|
test fails.
|