summaryrefslogtreecommitdiff
path: root/regress/sbin
AgeCommit message (Collapse)Author
2007-10-15Add new "reached end of file while parsing quoted string" as expectedHans-Joerg Hoexer
error message.
2007-10-14regression test for include directive (if anyone has a better way to doTheo de Raadt
this messy include file copy, let me know)
2007-10-13we decided numbers used as strings is wrongTheo de Raadt
2007-09-23Allow numbers to be used as unquoted strings again.Marco Pfatschbacher
While there, also restrict the use of concatenated, unquoted strings for variable assignments only. Eyeballed by markus@, OK henning@
2007-09-19Fix and re-enable tests for interface->address translation.Marco Pfatschbacher
OK henning
2007-09-19Add a few "flags any" and "no state" to have the rulesetsMarco Pfatschbacher
match against the old checksums again.
2007-09-19pfctl seems to report errors when accessing empty tables,Marco Pfatschbacher
in a different manner now. Use "-T show" now. OK henning
2007-09-19"flags S/SA keep state" is the default nowMarco Pfatschbacher
OK henning
2007-09-19Adopt 14 altq tests to the change of the queue output format.Marco Pfatschbacher
OK henning
2007-09-19This got broken when a second pool (pfrkentry2) was addedMarco Pfatschbacher
for source-tracking support about 3 years ago. OK henning
2007-09-19Remove "localhost" from the table test, since the result is dependentMarco Pfatschbacher
on the resolver. In some enviroments you'll get an AAAA for it, in others you won't. Testing the resolver isn't really the intention of this test anyway. OK henning
2007-08-30regress test address rangesDaniel Hartmeier
2007-07-03both 'proto 50' and 'proto esp' must work in flow specificationsMarkus Friedl
2007-06-20Allow "log" for nat rules without "pass".Marco Pfatschbacher
OK henning@, ``passt scho'' markus@
2007-05-19detect if newfs fails and add an extra test (amd64 floppy)Otto Moerbeek
2007-05-10Do not crash when lists include the "any" keyword. Reported byHans-Joerg Hoexer
<ralf.horstmann at gmx.net>, thanks! Slightly different fix. Also add a regression test. ok mpf@
2007-05-02now that optimization is on by default, fix the regress tests byDavid Krause
disabling optimization for the non-optimized tests, ok henning@
2007-04-18some newfs checks, not hooked in, because it needs certain disktabOtto Moerbeek
entries which are not available on all platforms
2007-03-16move autodetection of the ID type to the parser. this way theMarkus Friedl
static flows have the correct ID, too. ok hshoexer, reyk
2007-03-14We switched to aes cbc quite some time ago, so also use the correctHans-Joerg Hoexer
key sizes here, too. We now have to use 128 bit key instead of 160. Noticed by david@
2007-02-19add a test for null encryptionHans-Joerg Hoexer
2007-02-19we have to use '-k' now to show keys.Hans-Joerg Hoexer
2007-02-19previous commit to parse.y was undone. adopt these two regression tests.Hans-Joerg Hoexer
2007-02-16Adopt to recent change in parse.y (do not accept '\n' in quotedHans-Joerg Hoexer
strings). The syntax error is now reported at the correct line.
2007-01-10allow rule if there is at least _one_ matching address family combination.Markus Friedl
this allows 'flow from lo0 to 127.0.0.1' if lo0 has an ipv6 address. ok itojun@, hshoexer@
2007-01-04don't pass -1 as a netmask; report vicviq at gmail.comMarkus Friedl
2006-11-30wrong rid for protocolMarkus Friedl
2006-11-30sync: rmv to unregister ipsec connectionsMarkus Friedl
2006-11-30sync: proto/port in lid/rid/connectionMarkus Friedl
2006-11-28very basic regress test for rtable select codeHenning Brauer
2006-11-24fix typo for remote port; from Brian CandlerMarkus Friedl
2006-11-21syncMarkus Friedl
2006-11-16add comment on how to update the *.ok files; ok hshoexer@Markus Friedl
2006-11-13Update to match improved address family check.Ryan Thomas McBride
2006-11-07Use anchor recursion when printing loaded ruleset (make certain that recursionRyan Thomas McBride
works and catch some other potential anchor weirdnesses). Non recursive printing still tested in pfopt6.
2006-11-07Add test for -a with nested anchors.Ryan Thomas McBride
2006-11-07Add regress tests for inline anchors.Ryan Thomas McBride
2006-11-01Adjust existing ikedel tests for aggressive mode support (we nowRyan Thomas McBride
delete both mainmode and aggressive mode phase 1 transforms)
2006-10-31Remove bogus input line.Hans-Joerg Hoexer
2006-10-31Add some regression tests for odd ipsecctl behaviour noticed byHans-Joerg Hoexer
Prabhu Gurumurt. Test ikefail10 should fail, but does not and needs to be fixed.
2006-10-28Expected regress changes due to separation of parsing and kernel loading.Ryan Thomas McBride
2006-10-25test logging to alternate pflog interfacesHenning Brauer
2006-10-25tag names may be longer now, and someone didn't update regress testsHenning Brauer
accordingly
2006-10-17'flags S/SA' not implicit if the rule is stateless.Ryan Thomas McBride
2006-10-06Handle default 'flags S/SA keep state', 'no state' and 'flags any'.Ryan Thomas McBride
2006-08-29Test for an as yet unresolved problem:Christian Weisgerber
If list expansion produces peer pairings between different address families, this should be an error. Suggested by and ok hshoexer@
2006-08-29Add support for IKE AH rules to ipsecctl. Man page input by jmc@.Christian Weisgerber
ok hshoexer@
2006-07-21tests similar to ike49 and ike50, but with ipv6 addresses.Hans-Joerg Hoexer
2006-07-21yet another test.Hans-Joerg Hoexer
2006-07-21new tests for default peer usageHans-Joerg Hoexer
generated by cgit v1.2.3 (git 2.25.1) at 2024-11-24 13:43:22 +0000