summaryrefslogtreecommitdiff
path: root/regress/sbin
AgeCommit message (Collapse)Author
2012-09-17sync with transform-name-fixMarkus Friedl
2012-09-15sync with recent ipsecctl changes/fixesMarkus Friedl
2012-07-10Rename "life" to "lifetime" to match iked.Lawrence Teo
ok mikeb naddy sthen; procedures ok henning
2012-07-08AES-CTR, AES-GCM, AES-GMAC are disallowed with manual SAsChristian Weisgerber
2011-12-12update regression tests wrt skip steps (fixed in pfctl.c rev1.305);Mike Belopuhov
ok henning mcbride (a while back)
2011-12-12fixup regression tests wrt skip steps (fixed in pfctl.c rev1.305);Mike Belopuhov
ok henning mcbride (a while back)
2011-11-27adjust for port numbers instead of names by defaultHenning Brauer
From: Lawrence Teo <lteo at devio at us>
2011-07-27oops, missing file for weighted round-robin test.Ryan Thomas McBride
2011-07-27Update regress tests for weighted round-robin (and recent pool bugfix)Ryan Thomas McBride
2011-07-24Handle 'show' specially to prepare for regress tests on pfrke_routeRyan Thomas McBride
and pfrke_cost entries. Output becomes sorted in table order.
2011-07-24Update PF table regress tests to work with -current.Ryan Thomas McBride
2011-07-13Must now specify correct protocol (tcp, udp) for user and group attributes.Ryan Thomas McBride
2011-07-08Add regress tests for 'prio' keyword.Ryan Thomas McBride
2011-07-08'prio' will be a reserved keyword soon.Ryan Thomas McBride
2011-07-08Update regress tests for the following changes:Ryan Thomas McBride
- if_addr RB_TREE (Address sort differently on an interface) - skip steps changes - RDOMAIN - reordering of address/port tests - fastroute is gone - keep state is no longer printed by default - lo0 now has link-local scope address in addition to ::1
2011-07-07Regress test cleanup step 1 of n: require-order no longer exists.Ryan Thomas McBride
2011-07-06update regress for non-crypto flow 'type use' caseTheo de Raadt
2011-04-18Deprecate vnds in favour of svnds.Thordur I. Bjornsson
In effect, this removes the "old" vndX nodes, and renames the svndX nodes to vndX. Old svndX nodes will still continue to work though, for now. Cleanup accordingly. ok deraadt@, todd@ comments and ok on the man page bits from jmc@
2010-10-15libdes -> libcryptoJonathan Gray
2010-10-06Retire SkipjackMike Belopuhov
There's not much use for the declassified cipher from the 80's with a questionable license these days. According to the FIPS drafts, Skipjack reaches its EOL in December 2010. The libc portion will be removed after the ports hackathon. djm and thib agree, no objections from deraadt Thanks to jsg for digging up FIPS drafts.
2010-07-03add several new tests for pfctl, and fix the output of some existingPeter Hessler
tests for the updated pfctl. OK henning@, mcbride@
2010-07-01if we cannot copy the setup file (because objdir doesn't exist), thenPeter Hessler
continue anyways.
2010-06-30Add a test for route labels, re PR6416. ok phessler@Stuart Henderson
2010-06-29Replace the hand-crafted Diffie-Hellman implementation in isakmpd withReyk Floeter
the smaller implementation from iked that is using libcrypto instead. This allows to remove a lot of code (which is always good), get rid of some custom crypto code by using libcrypto, theoretically adds support for many new MODP and EC2N/ECP modes (but it is not configurable yet), and allows to share the dh.c/dh.h code in different codebases (it is identical in isakmpd and iked, but could also be used elsewhere). ok deraadt@
2010-06-20The -R option was removed from pfctl in March, so we no longer need thisPeter Hessler
test. The remaining pieces are all tested in other regress tests. OK sthen@
2010-05-10Various comment typos. 'wether' -> 'whether' (most popular), 'possiblity' ->Kenneth R Westerback
'possibility', 'optins' -> 'options', 'resposne' -> 'response', 'unecessary' -> 'unnecessary', 'desination' -> 'destination'. Collected from various misc@ and tech@ postings, many by Brad Tilley.
2010-03-23adjust after -A / -O / -R / -T load removalHenning Brauer
2010-01-13Update regress output files to -current behaviourRyan Thomas McBride
- non-pool translation/routing specification - leftover bits from nat-to/rdr-to/binat-to
2010-01-13Remove random component of auto-generated table names in loaded rules.Ryan Thomas McBride
2010-01-12no nat is no longer legalRyan Thomas McBride
convert nat/rdr/binat rules to nat-to/rdr-to/binat-to
2010-01-12{ if0, if1 } is ambiguous in a route spec, and this should have beenRyan Thomas McBride
rejected before (I'm surprised this worked)
2010-01-12nat-anchor, rdr-anchor, binat-anchor are no longer legal in the grammar.Ryan Thomas McBride
2010-01-04add a script that I use before ever release to check that ourTheo de Raadt
edge conditions for disklabel -A are going to be acceptable ok krw
2009-10-06more updates for new pf with source-hash manually added toJonathan Gray
loaded output as it doesn't currently appear as it should. ok henning@
2009-09-24Update some more tests for new pf.Jonathan Gray
ok henning@
2009-09-24Remove some tests that are no longer relevant with the new pf.Jonathan Gray
ok henning@
2009-09-23sync with pfopt5.in correct comments regarding -N/-RJonathan Gray
2009-09-23More tweaks to try to catchup to recent pf changes.Jonathan Gray
pfopt5 part from sthen@ ok henning@ sthen@
2009-09-07implement binat-to as a macro-like rule: a rule using the new binat-toReyk Floeter
syntax will be expanded by the parser to a nat-to+rdr-to combination to be loaded into the kernel. this simplifies the migration from old binat rules and is less error-prone. feedback from many, manpage bits from jmc@ ok henning@
2009-09-03Adapt to new pfctl, remove use of -Fn and -snJonathan Gray
Thanks to phessler for pointing out that the show command was buried in '-gvvsn' ok henning
2009-09-03adapt to new pfJonathan Gray
ok henning
2009-09-03adapt to nat changesJonathan Gray
ok henning
2009-09-02convert a bunch of rdr/nat rules to the new syntaxJonathan Gray
Things still need to be changed for route-to/binat/command line options among other things. ok henning
2009-08-04Add regress tests with IPv4 and IPv6 addresses for the srcid and/or dstid.Joel Sing
ok hshoexer@
2009-06-30add "-o none" to pfctl call to prevent automatic table creation ofDavid Krause
multiple addresses which causes the test to fail; ok sthen@
2009-06-30update after the "reassemble tcp" fix (kernel/6178); ok sthen@David Krause
2009-06-24fix this regression test; "reassemble tcp" should be in this locationStuart Henderson
in the output. this test currently fails; see kernel/6178
2009-05-14handle the new require-order default of "no" in existing tests, and addStuart Henderson
a new test to check it's working correctly. ok deraadt@
2009-04-26- check equality with '==', from skreuzer@exit2shell.comOkan Demirmen
- unbreak, since -r was removed from disklabel(8) ok otto@
2009-04-06more scrub scrubbingHenning Brauer