4d7709ddf6
Copy the most important test cases from OpenBSD's corresponding src/regress/sbin/pfctl, those that run pfctl on a test input file and check correctness of its output. We have also added some new tests using the same format. The tests consist of a collection of input files (pf*.in) and corresponding output files (pf*.ok). We run pfctl -nv on the input files and check that the output matches the output files. If any discrepancy is discovered during future development in the source tree, we know that a regression bug has been introduced into the tree. Submitted by: paggas Sponsored by: Google, Inc (GSoC 2017) Differential Revision: https://reviews.freebsd.org/D11322
14 lines
726 B
Plaintext
14 lines
726 B
Plaintext
table < regress > { 1.2.3.4 !5.6.7.8 10/8 lo0 }
|
|
table <regress.1> const { ::1 fe80::/64 }
|
|
table <regress.a> { 1.2.3.4 !5.6.7.8 } { ::1 ::2 ::3 } file "/dev/null" const { 4.3.2.1 }
|
|
#match out on lo0 inet from < regress.1> to <regress.2> nat-to lo0:0
|
|
#match out on !lo0 inet from !<regress.1 > to <regress.2> nat-to lo0:0
|
|
#match in on lo0 inet6 from <regress.1> to <regress.2> rdr-to lo0:0
|
|
#match in on !lo0 inet6 from !< regress.1 > to <regress.2> rdr-to lo0:0
|
|
#match in from { <regress.1> !<regress.2> } to any
|
|
#match out from any to { !<regress.1>, <regress.2> }
|
|
pass in from <regress> to any
|
|
pass out from any to <regress >
|
|
pass in from { <regress.1> <regress.2> } to any
|
|
pass out from any to { !<regress.1>, !<regress.2> }
|