From 2e423df0b4c4ed89ddd1662e5dc992d9f695118e Mon Sep 17 00:00:00 2001 From: Ryan Thomas McBride Date: Fri, 6 Oct 2006 17:09:42 +0000 Subject: Handle default 'flags S/SA keep state', 'no state' and 'flags any'. --- regress/sbin/pfctl/pf84.optimized | 10 +++++----- 1 file changed, 5 insertions(+), 5 deletions(-) (limited to 'regress/sbin/pfctl/pf84.optimized') diff --git a/regress/sbin/pfctl/pf84.optimized b/regress/sbin/pfctl/pf84.optimized index ca79b21c987..e9de6569a83 100644 --- a/regress/sbin/pfctl/pf84.optimized +++ b/regress/sbin/pfctl/pf84.optimized @@ -10,23 +10,23 @@ [ Skip steps: i=end d=end f=end p=end sa=end sp=end da=end dp=end ] [ queue: qname= qid=0 pqname= pqid=0 ] [ Evaluations: 0 Packets: 0 Bytes: 0 States: 0 ] -@0 pass in proto tcp from any to any port = ssh keep state (source-track global) +@0 pass in proto tcp from any to any port = ssh flags S/SA keep state (source-track global) [ Skip steps: i=end d=end f=end p=end sa=end sp=end da=end ] [ queue: qname= qid=0 pqname= pqid=0 ] [ Evaluations: 0 Packets: 0 Bytes: 0 States: 0 ] -@1 pass in proto tcp from any to any port = smtp keep state (source-track global) +@1 pass in proto tcp from any to any port = smtp flags S/SA keep state (source-track global) [ Skip steps: i=end d=end f=end p=end sa=end sp=end da=end ] [ queue: qname= qid=0 pqname= pqid=0 ] [ Evaluations: 0 Packets: 0 Bytes: 0 States: 0 ] -@2 pass in proto tcp from any to any port = www keep state (source-track rule, max-src-states 3, max-src-nodes 1000) +@2 pass in proto tcp from any to any port = www flags S/SA keep state (source-track rule, max-src-states 3, max-src-nodes 1000) [ Skip steps: i=end d=end f=end p=end sa=end sp=end da=end ] [ queue: qname= qid=0 pqname= pqid=0 ] [ Evaluations: 0 Packets: 0 Bytes: 0 States: 0 ] -@3 pass in proto tcp from any to any port = ntp keep state (source-track rule, max-src-nodes 1000) +@3 pass in proto tcp from any to any port = ntp flags S/SA keep state (source-track rule, max-src-nodes 1000) [ Skip steps: i=end d=end f=end p=end sa=end sp=end da=end ] [ queue: qname= qid=0 pqname= pqid=0 ] [ Evaluations: 0 Packets: 0 Bytes: 0 States: 0 ] -@4 pass in proto tcp from any to any port = 321 keep state (source-track global, max-src-states 3) +@4 pass in proto tcp from any to any port = 321 flags S/SA keep state (source-track global, max-src-states 3) [ Skip steps: i=end d=end f=end p=end sa=end sp=end da=end dp=end ] [ queue: qname= qid=0 pqname= pqid=0 ] [ Evaluations: 0 Packets: 0 Bytes: 0 States: 0 ] -- cgit v1.2.3