Now that pf looks behind IPv4 authentication headers, disable the

transport mode tests that fail because of floating states.  At least
IPv4 and IPv6 are in sync now.

diff --git a/regress/sys/netinet/ipsec/Makefile b/regress/sys/netinet/ipsec/Makefile
index 7e2e374..8ed3ed8 100644 (file)
--- a/regress/sys/netinet/ipsec/Makefile
+++ b/regress/sys/netinet/ipsec/Makefile
@@ -1,4 +1,4 @@
-#      $OpenBSD: Makefile,v 1.15 2017/05/27 10:58:53 bluhm Exp $
+#      $OpenBSD: Makefile,v 1.16 2017/05/28 21:23:47 bluhm Exp $
 
 # This test needs a manual setup of four machines, the make
 # target create-setup can be used distribute the configuration.
@@ -256,7 +256,10 @@ stamp-drop:
 
 # Disable tests that do not pass.
 
-run-regress-pflog-ping-IPS_AH_TRANSP_IPV6 \
+run-regress-pflog-ping-IPS_AH_TRANSP_IPV4 \
+    run-regress-pflog-udp-IPS_AH_TRANSP_IPV4 \
+    run-regress-pflog-tcp-IPS_AH_TRANSP_IPV4 \
+    run-regress-pflog-ping-IPS_AH_TRANSP_IPV6 \
     run-regress-pflog-udp-IPS_AH_TRANSP_IPV6 \
     run-regress-pflog-tcp-IPS_AH_TRANSP_IPV6:
        @echo '\n======== $@ ========'