regress purposes before starting and destroy them afterwards.
lo1 -> lo1000000
tun0 -> tun1000000
tun1 -> tun1000001
ok markus@
-# $OpenBSD: Makefile,v 1.164 2003/11/06 15:22:16 henning Exp $
+# $OpenBSD: Makefile,v 1.165 2003/12/05 16:55:40 henning Exp $
# TARGETS
# pf: feed pfNN.in through pfctl and check wether the output matches pfNN.ok
PFTABLE=1 2 3 4 5 6 7 8 9 10 11 12 13
PFOPT=1 2 3 4 5
+.BEGIN:
+ -${SUDO} ifconfig lo1000000 create
+ -${SUDO} ifconfig tun1000000 create
+ -${SUDO} ifconfig tun1000001 create
+
+.END:
+ ${SUDO} ifconfig lo1000000 destroy
+# destroy on tun does not work yet
+# ${SUDO} ifconfig tun1000000 destroy
+# ${SUDO} ifconfig tun1000001 destroy
+
.for n in ${PFFAIL}
PFAIL_TARGETS+=pfail${n}
PFAIL_UPDATES+=pfail${n}-update
pass in quick on enc0 fastroute inet all
pass in quick on enc0 fastroute inet6 all
-pass out quick on tun0 route-to tun1 inet all
-pass out quick on tun0 route-to tun1 from any to 192.168.1.1
-pass out quick on tun0 route-to tun1 from any to fec0::1
+pass out quick on tun1000000 route-to tun1000001 inet all
+pass out quick on tun1000000 route-to tun1000001 from any to 192.168.1.1
+pass out quick on tun1000000 route-to tun1000001 from any to fec0::1
-block in on tun0 dup-to (tun1 192.168.1.1) proto tcp from any to any port = 21
-block in on tun0 dup-to (tun1 fec0::1) proto tcp from any to any port = 21
+block in on tun1000000 dup-to (tun1000001 192.168.1.1) proto tcp from any to any port = 21
+block in on tun1000000 dup-to (tun1000001 fec0::1) proto tcp from any to any port = 21
-pass in quick on tun0 route-to tun1 from 192.168.1.1/32 to 10.1.1.1/32
-pass in quick on tun0 route-to tun1 from fec0::1/64 to fec1::2/128
+pass in quick on tun1000000 route-to tun1000001 from 192.168.1.1/32 to 10.1.1.1/32
+pass in quick on tun1000000 route-to tun1000001 from fec0::1/64 to fec1::2/128
-block in on tun0 reply-to (tun1 192.168.1.1) proto tcp from any to any port = 21
-block in on tun0 reply-to (tun1 fec0::1) proto tcp from any to any port = 21
+block in on tun1000000 reply-to (tun1000001 192.168.1.1) proto tcp from any to any port = 21
+block in on tun1000000 reply-to (tun1000001 fec0::1) proto tcp from any to any port = 21
-pass in quick on tun0 reply-to tun1 from 192.168.1.1/32 to 10.1.1.1/32
-pass in quick on tun0 reply-to tun1 from fec0::1/64 to fec1::2/128
+pass in quick on tun1000000 reply-to tun1000001 from 192.168.1.1/32 to 10.1.1.1/32
+pass in quick on tun1000000 reply-to tun1000001 from fec0::1/64 to fec1::2/128
-pass in quick on tun0 dup-to (tun1 192.168.1.100) from 192.168.1.1/32 to 10.1.1.1/32
-pass in quick on tun0 dup-to (tun1 fec1::2) from fec0::1/64 to fec1::2/128
+pass in quick on tun1000000 dup-to (tun1000001 192.168.1.100) from 192.168.1.1/32 to 10.1.1.1/32
+pass in quick on tun1000000 dup-to (tun1000001 fec1::2) from fec0::1/64 to fec1::2/128
[ Skip steps: p=6 sa=8 sp=end da=4 dp=6 ]
[ queue: qname= qid=0 pqname= pqid=0 ]
[ Evaluations: 0 Packets: 0 Bytes: 0 States: 0 ]
-@3 pass out quick on tun0 route-to tun1 inet all
+@3 pass out quick on tun1000000 route-to tun1000001 inet all
[ Skip steps: i=end d=6 f=5 p=6 sa=8 sp=end dp=6 ]
[ queue: qname= qid=0 pqname= pqid=0 ]
[ Evaluations: 0 Packets: 0 Bytes: 0 States: 0 ]
-@4 pass out quick on tun0 route-to tun1 inet from any to 192.168.1.1
+@4 pass out quick on tun1000000 route-to tun1000001 inet from any to 192.168.1.1
[ Skip steps: i=end d=6 p=6 sa=8 sp=end dp=6 ]
[ queue: qname= qid=0 pqname= pqid=0 ]
[ Evaluations: 0 Packets: 0 Bytes: 0 States: 0 ]
-@5 pass out quick on tun0 route-to tun1 inet6 from any to fec0::1
+@5 pass out quick on tun1000000 route-to tun1000001 inet6 from any to fec0::1
[ Skip steps: i=end sa=8 sp=end ]
[ queue: qname= qid=0 pqname= pqid=0 ]
[ Evaluations: 0 Packets: 0 Bytes: 0 States: 0 ]
-@6 block drop in on tun0 dup-to (tun1 192.168.1.1) inet proto tcp from any to any port = ftp
+@6 block drop in on tun1000000 dup-to (tun1000001 192.168.1.1) inet proto tcp from any to any port = ftp
[ Skip steps: i=end d=end p=8 sa=8 sp=end da=8 dp=8 ]
[ queue: qname= qid=0 pqname= pqid=0 ]
[ Evaluations: 0 Packets: 0 Bytes: 0 States: 0 ]
-@7 block drop in on tun0 dup-to (tun1 fec0::1) inet6 proto tcp from any to any port = ftp
+@7 block drop in on tun1000000 dup-to (tun1000001 fec0::1) inet6 proto tcp from any to any port = ftp
[ Skip steps: i=end d=end sp=end ]
[ queue: qname= qid=0 pqname= pqid=0 ]
[ Evaluations: 0 Packets: 0 Bytes: 0 States: 0 ]
-@8 pass in quick on tun0 route-to tun1 inet from 192.168.1.1 to 10.1.1.1
+@8 pass in quick on tun1000000 route-to tun1000001 inet from 192.168.1.1 to 10.1.1.1
[ Skip steps: i=end d=end p=10 sp=end dp=10 ]
[ queue: qname= qid=0 pqname= pqid=0 ]
[ Evaluations: 0 Packets: 0 Bytes: 0 States: 0 ]
-@9 pass in quick on tun0 route-to tun1 inet6 from fec0::/64 to fec1::2
+@9 pass in quick on tun1000000 route-to tun1000001 inet6 from fec0::/64 to fec1::2
[ Skip steps: i=end d=end sp=end ]
[ queue: qname= qid=0 pqname= pqid=0 ]
[ Evaluations: 0 Packets: 0 Bytes: 0 States: 0 ]
-@10 block drop in on tun0 reply-to (tun1 192.168.1.1) inet proto tcp from any to any port = ftp
+@10 block drop in on tun1000000 reply-to (tun1000001 192.168.1.1) inet proto tcp from any to any port = ftp
[ Skip steps: i=end d=end p=12 sa=12 sp=end da=12 dp=12 ]
[ queue: qname= qid=0 pqname= pqid=0 ]
[ Evaluations: 0 Packets: 0 Bytes: 0 States: 0 ]
-@11 block drop in on tun0 reply-to (tun1 fec0::1) inet6 proto tcp from any to any port = ftp
+@11 block drop in on tun1000000 reply-to (tun1000001 fec0::1) inet6 proto tcp from any to any port = ftp
[ Skip steps: i=end d=end sp=end ]
[ queue: qname= qid=0 pqname= pqid=0 ]
[ Evaluations: 0 Packets: 0 Bytes: 0 States: 0 ]
-@12 pass in quick on tun0 reply-to tun1 inet from 192.168.1.1 to 10.1.1.1
+@12 pass in quick on tun1000000 reply-to tun1000001 inet from 192.168.1.1 to 10.1.1.1
[ Skip steps: i=end d=end p=end sp=end dp=end ]
[ queue: qname= qid=0 pqname= pqid=0 ]
[ Evaluations: 0 Packets: 0 Bytes: 0 States: 0 ]
-@13 pass in quick on tun0 reply-to tun1 inet6 from fec0::/64 to fec1::2
+@13 pass in quick on tun1000000 reply-to tun1000001 inet6 from fec0::/64 to fec1::2
[ Skip steps: i=end d=end p=end sp=end dp=end ]
[ queue: qname= qid=0 pqname= pqid=0 ]
[ Evaluations: 0 Packets: 0 Bytes: 0 States: 0 ]
-@14 pass in quick on tun0 dup-to (tun1 192.168.1.100) inet from 192.168.1.1 to 10.1.1.1
+@14 pass in quick on tun1000000 dup-to (tun1000001 192.168.1.100) inet from 192.168.1.1 to 10.1.1.1
[ Skip steps: i=end d=end p=end sp=end dp=end ]
[ queue: qname= qid=0 pqname= pqid=0 ]
[ Evaluations: 0 Packets: 0 Bytes: 0 States: 0 ]
-@15 pass in quick on tun0 dup-to (tun1 fec1::2) inet6 from fec0::/64 to fec1::2
+@15 pass in quick on tun1000000 dup-to (tun1000001 fec1::2) inet6 from fec0::/64 to fec1::2
[ Skip steps: i=end d=end f=end p=end sa=end sp=end da=end dp=end ]
[ queue: qname= qid=0 pqname= pqid=0 ]
[ Evaluations: 0 Packets: 0 Bytes: 0 States: 0 ]
pass in quick on enc0 fastroute all
pass in quick on enc0 fastroute inet all
pass in quick on enc0 fastroute inet6 all
-pass out quick on tun0 route-to tun1 inet all
-pass out quick on tun0 route-to tun1 inet from any to 192.168.1.1
-pass out quick on tun0 route-to tun1 inet6 from any to fec0::1
-block drop in on tun0 dup-to (tun1 192.168.1.1) inet proto tcp from any to any port = ftp
-block drop in on tun0 dup-to (tun1 fec0::1) inet6 proto tcp from any to any port = ftp
-pass in quick on tun0 route-to tun1 inet from 192.168.1.1 to 10.1.1.1
-pass in quick on tun0 route-to tun1 inet6 from fec0::/64 to fec1::2
-block drop in on tun0 reply-to (tun1 192.168.1.1) inet proto tcp from any to any port = ftp
-block drop in on tun0 reply-to (tun1 fec0::1) inet6 proto tcp from any to any port = ftp
-pass in quick on tun0 reply-to tun1 inet from 192.168.1.1 to 10.1.1.1
-pass in quick on tun0 reply-to tun1 inet6 from fec0::/64 to fec1::2
-pass in quick on tun0 dup-to (tun1 192.168.1.100) inet from 192.168.1.1 to 10.1.1.1
-pass in quick on tun0 dup-to (tun1 fec1::2) inet6 from fec0::/64 to fec1::2
+pass out quick on tun1000000 route-to tun1000001 inet all
+pass out quick on tun1000000 route-to tun1000001 inet from any to 192.168.1.1
+pass out quick on tun1000000 route-to tun1000001 inet6 from any to fec0::1
+block drop in on tun1000000 dup-to (tun1000001 192.168.1.1) inet proto tcp from any to any port = ftp
+block drop in on tun1000000 dup-to (tun1000001 fec0::1) inet6 proto tcp from any to any port = ftp
+pass in quick on tun1000000 route-to tun1000001 inet from 192.168.1.1 to 10.1.1.1
+pass in quick on tun1000000 route-to tun1000001 inet6 from fec0::/64 to fec1::2
+block drop in on tun1000000 reply-to (tun1000001 192.168.1.1) inet proto tcp from any to any port = ftp
+block drop in on tun1000000 reply-to (tun1000001 fec0::1) inet6 proto tcp from any to any port = ftp
+pass in quick on tun1000000 reply-to tun1000001 inet from 192.168.1.1 to 10.1.1.1
+pass in quick on tun1000000 reply-to tun1000001 inet6 from fec0::/64 to fec1::2
+pass in quick on tun1000000 dup-to (tun1000001 192.168.1.100) inet from 192.168.1.1 to 10.1.1.1
+pass in quick on tun1000000 dup-to (tun1000001 fec1::2) inet6 from fec0::/64 to fec1::2
scrub in on lo0 from any to any no-df
scrub in log on lo0 from any to any min-ttl 25
scrub on lo0 from any to any max-mss 224
-scrub out log on lo1 from any to 10.0.0.1 no-df max-mss 224
+scrub out log on lo1000000 from any to 10.0.0.1 no-df max-mss 224
scrub in on lo0 from any to any max-mss 224
-scrub in log on {lo0 lo1} from any to any
+scrub in log on {lo0 lo1000000} from any to any
scrub in on lo0 inet from (lo0) to any
-scrub in log on lo0 inet6 from { (lo1), (lo0) } to 2000::1
+scrub in log on lo0 inet6 from { (lo1000000), (lo0) } to 2000::1
scrub in inet from { 10.0.0.1, 10.0.0.2 } to { 10.0.0.3, 10.0.0.4 }
scrub in from { lo0 10.1.1.1 } to any
scrub in from { 10.0.0.1 lo0 } to any
[ Skip steps: p=end sa=7 sp=end dp=end ]
[ queue: qname= qid=0 pqname= pqid=0 ]
[ Evaluations: 0 Packets: 0 Bytes: 0 States: 0 ]
-@3 scrub out log on lo1 inet from any to 10.0.0.1 no-df max-mss 224 fragment reassemble
+@3 scrub out log on lo1000000 inet from any to 10.0.0.1 no-df max-mss 224 fragment reassemble
[ Skip steps: p=end sa=7 sp=end dp=end ]
[ queue: qname= qid=0 pqname= pqid=0 ]
[ Evaluations: 0 Packets: 0 Bytes: 0 States: 0 ]
[ Skip steps: d=end f=7 p=end sa=7 sp=end da=8 dp=end ]
[ queue: qname= qid=0 pqname= pqid=0 ]
[ Evaluations: 0 Packets: 0 Bytes: 0 States: 0 ]
-@6 scrub in log on lo1 all fragment reassemble
+@6 scrub in log on lo1000000 all fragment reassemble
[ Skip steps: d=end p=end sp=end da=8 dp=end ]
[ queue: qname= qid=0 pqname= pqid=0 ]
[ Evaluations: 0 Packets: 0 Bytes: 0 States: 0 ]
[ Skip steps: i=10 d=end p=end sp=end dp=end ]
[ queue: qname= qid=0 pqname= pqid=0 ]
[ Evaluations: 0 Packets: 0 Bytes: 0 States: 0 ]
-@8 scrub in log on lo0 inet6 from (lo1) to 2000::1 fragment reassemble
+@8 scrub in log on lo0 inet6 from (lo1000000) to 2000::1 fragment reassemble
[ Skip steps: i=10 d=end f=10 p=end sp=end da=10 dp=end ]
[ queue: qname= qid=0 pqname= pqid=0 ]
[ Evaluations: 0 Packets: 0 Bytes: 0 States: 0 ]
scrub in on lo0 all no-df fragment reassemble
scrub in log on lo0 all min-ttl 25 fragment reassemble
scrub on lo0 all max-mss 224 fragment reassemble
-scrub out log on lo1 inet from any to 10.0.0.1 no-df max-mss 224 fragment reassemble
+scrub out log on lo1000000 inet from any to 10.0.0.1 no-df max-mss 224 fragment reassemble
scrub in on lo0 all max-mss 224 fragment reassemble
scrub in log on lo0 all fragment reassemble
-scrub in log on lo1 all fragment reassemble
+scrub in log on lo1000000 all fragment reassemble
scrub in on lo0 inet from (lo0) to any fragment reassemble
-scrub in log on lo0 inet6 from (lo1) to 2000::1 fragment reassemble
+scrub in log on lo0 inet6 from (lo1000000) to 2000::1 fragment reassemble
scrub in log on lo0 inet6 from (lo0) to 2000::1 fragment reassemble
scrub in inet from 10.0.0.1 to 10.0.0.3 fragment reassemble
scrub in inet from 10.0.0.1 to 10.0.0.4 fragment reassemble
nat on lo0 from 192.168.1.1 to any -> 10.0.0.1
rdr on lo0 proto tcp from any to 1.2.3.4/32 port 2222 -> 10.0.0.10 port 22
binat on lo0 from 192.168.1.1 to any -> 10.0.0.1
-pass in on lo1 all
+pass in on lo1000000 all
[ Skip steps: i=end d=end f=end p=end sa=end sp=end da=end dp=end ]
[ queue: qname= qid=0 pqname= pqid=0 ]
[ Evaluations: 0 Packets: 0 Bytes: 0 States: 0 ]
-@0 pass in on lo1 all
+@0 pass in on lo1000000 all
[ Skip steps: i=end d=end f=end p=end sa=end sp=end da=end dp=end ]
[ queue: qname= qid=0 pqname= pqid=0 ]
[ Evaluations: 0 Packets: 0 Bytes: 0 States: 0 ]
nat on lo0 inet from 192.168.1.1 to any -> 10.0.0.1
rdr on lo0 inet proto tcp from any to 1.2.3.4 port = 2222 -> 10.0.0.10 port 22
binat on lo0 inet from 192.168.1.1 to any -> 10.0.0.1
-pass in on lo1 all
+pass in on lo1000000 all
binat on lo0 from 1.1.1.1 to no-route -> 2.2.2.2
binat on lo0 from (lo0) to 1.1.1.1 -> 2.2.2.2
-binat on lo0 from (lo0) to 1.1.1.1 -> (lo1)
-binat on lo0 inet from (lo0) to (lo1) -> (lo1)
+binat on lo0 from (lo0) to 1.1.1.1 -> (lo1000000)
+binat on lo0 inet from (lo0) to (lo1000000) -> (lo1000000)
binat on lo0 from 1.1.1.1 to <sometable> -> 2.2.2.2
binat on lo0 from 1.1.1.1 to !<sometable> -> 2.2.2.2
-binat on lo0 from 1.1.1.1 to (lo1) -> 2.2.2.2
-binat on lo0 from 1.1.1.1 to !(lo1) -> 2.2.2.2
+binat on lo0 from 1.1.1.1 to (lo1000000) -> 2.2.2.2
+binat on lo0 from 1.1.1.1 to !(lo1000000) -> 2.2.2.2
binat on lo0 from (lo0) to <sometable> -> 2.2.2.2
binat on lo0 from ::1 to no-route -> ::2
binat on lo0 from (lo0) to ::1 -> ::2
-binat on lo0 from (lo0) to ::1 -> (lo1)
-binat on lo0 inet6 from (lo0) to (lo1) -> (lo1)
+binat on lo0 from (lo0) to ::1 -> (lo1000000)
+binat on lo0 inet6 from (lo0) to (lo1000000) -> (lo1000000)
binat on lo0 from ::1 to <sometable> -> ::2
binat on lo0 from ::1 to !<sometable> -> ::2
-binat on lo0 from ::1 to (lo1) -> ::2
-binat on lo0 from ::1 to !(lo1) -> ::2
+binat on lo0 from ::1 to (lo1000000) -> ::2
+binat on lo0 from ::1 to !(lo1000000) -> ::2
binat on lo0 from (lo0) to <sometable> -> ::2
[ Skip steps: i=end d=end f=21 p=end sa=16 sp=end da=15 dp=end ]
[ queue: qname= qid=0 pqname= pqid=0 ]
[ Evaluations: 0 Packets: 0 Bytes: 0 States: 0 ]
-@14 binat on lo0 inet from (lo0) to 1.1.1.1 -> (lo1)
+@14 binat on lo0 inet from (lo0) to 1.1.1.1 -> (lo1000000)
[ Skip steps: i=end d=end f=21 p=end sa=16 sp=end dp=end ]
[ queue: qname= qid=0 pqname= pqid=0 ]
[ Evaluations: 0 Packets: 0 Bytes: 0 States: 0 ]
-@15 binat on lo0 inet from (lo0) to (lo1) -> (lo1)
+@15 binat on lo0 inet from (lo0) to (lo1000000) -> (lo1000000)
[ Skip steps: i=end d=end f=21 p=end sp=end dp=end ]
[ queue: qname= qid=0 pqname= pqid=0 ]
[ Evaluations: 0 Packets: 0 Bytes: 0 States: 0 ]
[ Skip steps: i=end d=end f=21 p=end sa=20 sp=end dp=end ]
[ queue: qname= qid=0 pqname= pqid=0 ]
[ Evaluations: 0 Packets: 0 Bytes: 0 States: 0 ]
-@18 binat on lo0 inet from 1.1.1.1 to (lo1) -> 2.2.2.2
+@18 binat on lo0 inet from 1.1.1.1 to (lo1000000) -> 2.2.2.2
[ Skip steps: i=end d=end f=21 p=end sa=20 sp=end dp=end ]
[ queue: qname= qid=0 pqname= pqid=0 ]
[ Evaluations: 0 Packets: 0 Bytes: 0 States: 0 ]
-@19 binat on lo0 inet from 1.1.1.1 to ! (lo1) -> 2.2.2.2
+@19 binat on lo0 inet from 1.1.1.1 to ! (lo1000000) -> 2.2.2.2
[ Skip steps: i=end d=end f=21 p=end sp=end dp=end ]
[ queue: qname= qid=0 pqname= pqid=0 ]
[ Evaluations: 0 Packets: 0 Bytes: 0 States: 0 ]
[ Skip steps: i=end d=end f=end p=end sa=25 sp=end da=24 dp=end ]
[ queue: qname= qid=0 pqname= pqid=0 ]
[ Evaluations: 0 Packets: 0 Bytes: 0 States: 0 ]
-@23 binat on lo0 inet6 from (lo0) to ::1 -> (lo1)
+@23 binat on lo0 inet6 from (lo0) to ::1 -> (lo1000000)
[ Skip steps: i=end d=end f=end p=end sa=25 sp=end dp=end ]
[ queue: qname= qid=0 pqname= pqid=0 ]
[ Evaluations: 0 Packets: 0 Bytes: 0 States: 0 ]
-@24 binat on lo0 inet6 from (lo0) to (lo1) -> (lo1)
+@24 binat on lo0 inet6 from (lo0) to (lo1000000) -> (lo1000000)
[ Skip steps: i=end d=end f=end p=end sp=end dp=end ]
[ queue: qname= qid=0 pqname= pqid=0 ]
[ Evaluations: 0 Packets: 0 Bytes: 0 States: 0 ]
[ Skip steps: i=end d=end f=end p=end sa=29 sp=end dp=end ]
[ queue: qname= qid=0 pqname= pqid=0 ]
[ Evaluations: 0 Packets: 0 Bytes: 0 States: 0 ]
-@27 binat on lo0 inet6 from ::1 to (lo1) -> ::2
+@27 binat on lo0 inet6 from ::1 to (lo1000000) -> ::2
[ Skip steps: i=end d=end f=end p=end sa=29 sp=end dp=end ]
[ queue: qname= qid=0 pqname= pqid=0 ]
[ Evaluations: 0 Packets: 0 Bytes: 0 States: 0 ]
-@28 binat on lo0 inet6 from ::1 to ! (lo1) -> ::2
+@28 binat on lo0 inet6 from ::1 to ! (lo1000000) -> ::2
[ Skip steps: i=end d=end f=end p=end sp=end dp=end ]
[ queue: qname= qid=0 pqname= pqid=0 ]
[ Evaluations: 0 Packets: 0 Bytes: 0 States: 0 ]
binat on lo0 inet from 192.168.1.8 to ! 172.17.0.0/16 -> 10.0.0.8
binat on lo0 inet from 1.1.1.1 to no-route -> 2.2.2.2
binat on lo0 inet from (lo0) to 1.1.1.1 -> 2.2.2.2
-binat on lo0 inet from (lo0) to 1.1.1.1 -> (lo1)
-binat on lo0 inet from (lo0) to (lo1) -> (lo1)
+binat on lo0 inet from (lo0) to 1.1.1.1 -> (lo1000000)
+binat on lo0 inet from (lo0) to (lo1000000) -> (lo1000000)
binat on lo0 inet from 1.1.1.1 to <sometable> -> 2.2.2.2
binat on lo0 inet from 1.1.1.1 to ! <sometable> -> 2.2.2.2
-binat on lo0 inet from 1.1.1.1 to (lo1) -> 2.2.2.2
-binat on lo0 inet from 1.1.1.1 to ! (lo1) -> 2.2.2.2
+binat on lo0 inet from 1.1.1.1 to (lo1000000) -> 2.2.2.2
+binat on lo0 inet from 1.1.1.1 to ! (lo1000000) -> 2.2.2.2
binat on lo0 inet from (lo0) to <sometable> -> 2.2.2.2
binat on lo0 inet6 from ::1 to no-route -> ::2
binat on lo0 inet6 from (lo0) to ::1 -> ::2
-binat on lo0 inet6 from (lo0) to ::1 -> (lo1)
-binat on lo0 inet6 from (lo0) to (lo1) -> (lo1)
+binat on lo0 inet6 from (lo0) to ::1 -> (lo1000000)
+binat on lo0 inet6 from (lo0) to (lo1000000) -> (lo1000000)
binat on lo0 inet6 from ::1 to <sometable> -> ::2
binat on lo0 inet6 from ::1 to ! <sometable> -> ::2
-binat on lo0 inet6 from ::1 to (lo1) -> ::2
-binat on lo0 inet6 from ::1 to ! (lo1) -> ::2
+binat on lo0 inet6 from ::1 to (lo1000000) -> ::2
+binat on lo0 inet6 from ::1 to ! (lo1000000) -> ::2
binat on lo0 inet6 from (lo0) to <sometable> -> ::2
nat on ! lo0 proto { udp, tcp } from any to any -> 10.0.0.8 static-port
-nat on { lo0, tun0 } from any to any -> 10.0.0.8
+nat on { lo0, tun1000000 } from any to any -> 10.0.0.8
[ Skip steps: d=end f=end p=end sa=end sp=end da=end dp=end ]
[ queue: qname= qid=0 pqname= pqid=0 ]
[ Evaluations: 0 Packets: 0 Bytes: 0 States: 0 ]
-@19 nat on tun0 inet all -> 10.0.0.8
+@19 nat on tun1000000 inet all -> 10.0.0.8
[ Skip steps: i=end d=end f=end p=end sa=end sp=end da=end dp=end ]
[ queue: qname= qid=0 pqname= pqid=0 ]
[ Evaluations: 0 Packets: 0 Bytes: 0 States: 0 ]
nat on ! lo0 inet proto udp all -> 10.0.0.8 static-port
nat on ! lo0 inet proto tcp all -> 10.0.0.8 static-port
nat on lo0 inet all -> 10.0.0.8
-nat on tun0 inet all -> 10.0.0.8
+nat on tun1000000 inet all -> 10.0.0.8
EVIL = "lo0"
-GOOD = "{ lo0, lo1 }"
+GOOD = "{ lo0, lo1000000 }"
GOOD_NET = "{ 127.0.0.0/24, 10.0.1.0/24 }"
DEST_NET = "{ 1.2.3.4/25, 2.4.6.8/30 }"
[ Skip steps: d=end f=end p=end sp=end dp=end ]
[ queue: qname= qid=0 pqname= pqid=0 ]
[ Evaluations: 0 Packets: 0 Bytes: 0 States: 0 ]
-@5 rdr on lo1 inet proto tcp from 127.0.0.0/24 to 1.2.3.0/25 port = ftp -> 127.0.0.1 port 8021
+@5 rdr on lo1000000 inet proto tcp from 127.0.0.0/24 to 1.2.3.0/25 port = ftp -> 127.0.0.1 port 8021
[ Skip steps: i=end d=end f=end p=end sa=7 sp=end dp=end ]
[ queue: qname= qid=0 pqname= pqid=0 ]
[ Evaluations: 0 Packets: 0 Bytes: 0 States: 0 ]
-@6 rdr on lo1 inet proto tcp from 127.0.0.0/24 to 2.4.6.8/30 port = ftp -> 127.0.0.1 port 8021
+@6 rdr on lo1000000 inet proto tcp from 127.0.0.0/24 to 2.4.6.8/30 port = ftp -> 127.0.0.1 port 8021
[ Skip steps: i=end d=end f=end p=end sp=end dp=end ]
[ queue: qname= qid=0 pqname= pqid=0 ]
[ Evaluations: 0 Packets: 0 Bytes: 0 States: 0 ]
-@7 rdr on lo1 inet proto tcp from 10.0.1.0/24 to 1.2.3.0/25 port = ftp -> 127.0.0.1 port 8021
+@7 rdr on lo1000000 inet proto tcp from 10.0.1.0/24 to 1.2.3.0/25 port = ftp -> 127.0.0.1 port 8021
[ Skip steps: i=end d=end f=end p=end sa=end sp=end dp=end ]
[ queue: qname= qid=0 pqname= pqid=0 ]
[ Evaluations: 0 Packets: 0 Bytes: 0 States: 0 ]
-@8 rdr on lo1 inet proto tcp from 10.0.1.0/24 to 2.4.6.8/30 port = ftp -> 127.0.0.1 port 8021
+@8 rdr on lo1000000 inet proto tcp from 10.0.1.0/24 to 2.4.6.8/30 port = ftp -> 127.0.0.1 port 8021
[ Skip steps: i=end d=end f=end p=end sa=end sp=end da=end dp=end ]
[ queue: qname= qid=0 pqname= pqid=0 ]
[ Evaluations: 0 Packets: 0 Bytes: 0 States: 0 ]
EVIL = "lo0"
-GOOD = "{ lo0, lo1 }"
+GOOD = "{ lo0, lo1000000 }"
GOOD_NET = "{ 127.0.0.0/24, 10.0.1.0/24 }"
DEST_NET = "{ 1.2.3.4/25, 2.4.6.8/30 }"
rdr on lo0 inet proto tcp from any to 1.2.3.4 port = 2222 -> 10.0.0.10 port 22
rdr on lo0 inet proto tcp from 127.0.0.0/24 to 2.4.6.8/30 port = ftp -> 127.0.0.1 port 8021
rdr on lo0 inet proto tcp from 10.0.1.0/24 to 1.2.3.0/25 port = ftp -> 127.0.0.1 port 8021
rdr on lo0 inet proto tcp from 10.0.1.0/24 to 2.4.6.8/30 port = ftp -> 127.0.0.1 port 8021
-rdr on lo1 inet proto tcp from 127.0.0.0/24 to 1.2.3.0/25 port = ftp -> 127.0.0.1 port 8021
-rdr on lo1 inet proto tcp from 127.0.0.0/24 to 2.4.6.8/30 port = ftp -> 127.0.0.1 port 8021
-rdr on lo1 inet proto tcp from 10.0.1.0/24 to 1.2.3.0/25 port = ftp -> 127.0.0.1 port 8021
-rdr on lo1 inet proto tcp from 10.0.1.0/24 to 2.4.6.8/30 port = ftp -> 127.0.0.1 port 8021
+rdr on lo1000000 inet proto tcp from 127.0.0.0/24 to 1.2.3.0/25 port = ftp -> 127.0.0.1 port 8021
+rdr on lo1000000 inet proto tcp from 127.0.0.0/24 to 2.4.6.8/30 port = ftp -> 127.0.0.1 port 8021
+rdr on lo1000000 inet proto tcp from 10.0.1.0/24 to 1.2.3.0/25 port = ftp -> 127.0.0.1 port 8021
+rdr on lo1000000 inet proto tcp from 10.0.1.0/24 to 2.4.6.8/30 port = ftp -> 127.0.0.1 port 8021
# test
-block out log on tun0 all
-block in log on tun0 all
+block out log on tun1000000 all
+block in log on tun1000000 all
-block return-rst out log on tun0 proto tcp all
-block return-rst in log on tun0 proto tcp all
-block return-icmp out log on tun0 proto udp all
-block return-icmp in log on tun0 proto udp all
+block return-rst out log on tun1000000 proto tcp all
+block return-rst in log on tun1000000 proto tcp all
+block return-icmp out log on tun1000000 proto udp all
+block return-icmp in log on tun1000000 proto udp all
-block out log quick on tun0 from ! 157.161.48.183 to any
+block out log quick on tun1000000 from ! 157.161.48.183 to any
-block in quick on tun0 from any to 255.255.255.255
+block in quick on tun1000000 from any to 255.255.255.255
-block in log quick on tun0 from 10.0.0.0/8 to any
-block in log quick on tun0 from 172.16.0.0/12 to any
-block in quick log on tun0 from 192.168.0.0/16 to any
-block in quick log on tun0 from 255.255.255.255/32 to any
+block in log quick on tun1000000 from 10.0.0.0/8 to any
+block in log quick on tun1000000 from 172.16.0.0/12 to any
+block in quick log on tun1000000 from 192.168.0.0/16 to any
+block in quick log on tun1000000 from 255.255.255.255/32 to any
block in log quick from no-route to any
-pass out on tun0 inet proto icmp all icmp-type 8 code 0 keep state
-pass in on tun0 inet proto icmp all icmp-type 8 code 0 keep state
+pass out on tun1000000 inet proto icmp all icmp-type 8 code 0 keep state
+pass in on tun1000000 inet proto icmp all icmp-type 8 code 0 keep state
-pass out on tun0 proto udp all keep state
+pass out on tun1000000 proto udp all keep state
-pass in on tun0 proto udp from any to any port = domain keep state
+pass in on tun1000000 proto udp from any to any port = domain keep state
-pass out on tun0 proto tcp all keep state
+pass out on tun1000000 proto tcp all keep state
-pass in on tun0 proto tcp from any to any port = ssh keep state
-pass in on tun0 proto tcp from any to any port = smtp keep state
-pass in on tun0 proto tcp from any to any port = domain keep state
-pass in on tun0 proto tcp from any to any port = auth keep state
+pass in on tun1000000 proto tcp from any to any port = ssh keep state
+pass in on tun1000000 proto tcp from any to any port = smtp keep state
+pass in on tun1000000 proto tcp from any to any port = domain keep state
+pass in on tun1000000 proto tcp from any to any port = auth keep state
-@0 block drop out log on tun0 all
+@0 block drop out log on tun1000000 all
[ Skip steps: i=12 f=6 p=2 sa=6 sp=end da=7 dp=16 ]
[ queue: qname= qid=0 pqname= pqid=0 ]
[ Evaluations: 0 Packets: 0 Bytes: 0 States: 0 ]
-@1 block drop in log on tun0 all
+@1 block drop in log on tun1000000 all
[ Skip steps: i=12 f=6 sa=6 sp=end da=7 dp=16 ]
[ queue: qname= qid=0 pqname= pqid=0 ]
[ Evaluations: 0 Packets: 0 Bytes: 0 States: 0 ]
-@2 block return-rst out log on tun0 proto tcp all
+@2 block return-rst out log on tun1000000 proto tcp all
[ Skip steps: i=12 f=6 p=4 sa=6 sp=end da=7 dp=16 ]
[ queue: qname= qid=0 pqname= pqid=0 ]
[ Evaluations: 0 Packets: 0 Bytes: 0 States: 0 ]
-@3 block return-rst in log on tun0 proto tcp all
+@3 block return-rst in log on tun1000000 proto tcp all
[ Skip steps: i=12 f=6 sa=6 sp=end da=7 dp=16 ]
[ queue: qname= qid=0 pqname= pqid=0 ]
[ Evaluations: 0 Packets: 0 Bytes: 0 States: 0 ]
-@4 block return-icmp(port-unr, port-unr) out log on tun0 proto udp all
+@4 block return-icmp(port-unr, port-unr) out log on tun1000000 proto udp all
[ Skip steps: i=12 f=6 p=6 sa=6 sp=end da=7 dp=16 ]
[ queue: qname= qid=0 pqname= pqid=0 ]
[ Evaluations: 0 Packets: 0 Bytes: 0 States: 0 ]
-@5 block return-icmp(port-unr, port-unr) in log on tun0 proto udp all
+@5 block return-icmp(port-unr, port-unr) in log on tun1000000 proto udp all
[ Skip steps: i=12 sp=end da=7 dp=16 ]
[ queue: qname= qid=0 pqname= pqid=0 ]
[ Evaluations: 0 Packets: 0 Bytes: 0 States: 0 ]
-@6 block drop out log quick on tun0 inet from ! 157.161.48.183 to any
+@6 block drop out log quick on tun1000000 inet from ! 157.161.48.183 to any
[ Skip steps: i=12 f=12 p=13 sp=end dp=16 ]
[ queue: qname= qid=0 pqname= pqid=0 ]
[ Evaluations: 0 Packets: 0 Bytes: 0 States: 0 ]
-@7 block drop in quick on tun0 inet from any to 255.255.255.255
+@7 block drop in quick on tun1000000 inet from any to 255.255.255.255
[ Skip steps: i=12 d=13 f=12 p=13 sp=end dp=16 ]
[ queue: qname= qid=0 pqname= pqid=0 ]
[ Evaluations: 0 Packets: 0 Bytes: 0 States: 0 ]
-@8 block drop in log quick on tun0 inet from 10.0.0.0/8 to any
+@8 block drop in log quick on tun1000000 inet from 10.0.0.0/8 to any
[ Skip steps: i=12 d=13 f=12 p=13 sp=end da=end dp=16 ]
[ queue: qname= qid=0 pqname= pqid=0 ]
[ Evaluations: 0 Packets: 0 Bytes: 0 States: 0 ]
-@9 block drop in log quick on tun0 inet from 172.16.0.0/12 to any
+@9 block drop in log quick on tun1000000 inet from 172.16.0.0/12 to any
[ Skip steps: i=12 d=13 f=12 p=13 sp=end da=end dp=16 ]
[ queue: qname= qid=0 pqname= pqid=0 ]
[ Evaluations: 0 Packets: 0 Bytes: 0 States: 0 ]
-@10 block drop in log quick on tun0 inet from 192.168.0.0/16 to any
+@10 block drop in log quick on tun1000000 inet from 192.168.0.0/16 to any
[ Skip steps: i=12 d=13 f=12 p=13 sp=end da=end dp=16 ]
[ queue: qname= qid=0 pqname= pqid=0 ]
[ Evaluations: 0 Packets: 0 Bytes: 0 States: 0 ]
-@11 block drop in log quick on tun0 inet from 255.255.255.255 to any
+@11 block drop in log quick on tun1000000 inet from 255.255.255.255 to any
[ Skip steps: d=13 p=13 sp=end da=end dp=16 ]
[ queue: qname= qid=0 pqname= pqid=0 ]
[ Evaluations: 0 Packets: 0 Bytes: 0 States: 0 ]
[ Skip steps: sp=end da=end dp=16 ]
[ queue: qname= qid=0 pqname= pqid=0 ]
[ Evaluations: 0 Packets: 0 Bytes: 0 States: 0 ]
-@13 pass out on tun0 inet proto icmp all icmp-type echoreq code 0 keep state
+@13 pass out on tun1000000 inet proto icmp all icmp-type echoreq code 0 keep state
[ Skip steps: i=end f=15 p=15 sa=end sp=end da=end dp=16 ]
[ queue: qname= qid=0 pqname= pqid=0 ]
[ Evaluations: 0 Packets: 0 Bytes: 0 States: 0 ]
-@14 pass in on tun0 inet proto icmp all icmp-type echoreq code 0 keep state
+@14 pass in on tun1000000 inet proto icmp all icmp-type echoreq code 0 keep state
[ Skip steps: i=end sa=end sp=end da=end dp=16 ]
[ queue: qname= qid=0 pqname= pqid=0 ]
[ Evaluations: 0 Packets: 0 Bytes: 0 States: 0 ]
-@15 pass out on tun0 proto udp all keep state
+@15 pass out on tun1000000 proto udp all keep state
[ Skip steps: i=end f=end p=17 sa=end sp=end da=end ]
[ queue: qname= qid=0 pqname= pqid=0 ]
[ Evaluations: 0 Packets: 0 Bytes: 0 States: 0 ]
-@16 pass in on tun0 proto udp from any to any port = domain keep state
+@16 pass in on tun1000000 proto udp from any to any port = domain keep state
[ Skip steps: i=end f=end sa=end sp=end da=end ]
[ queue: qname= qid=0 pqname= pqid=0 ]
[ Evaluations: 0 Packets: 0 Bytes: 0 States: 0 ]
-@17 pass out on tun0 proto tcp all keep state
+@17 pass out on tun1000000 proto tcp all keep state
[ Skip steps: i=end f=end p=end sa=end sp=end da=end ]
[ queue: qname= qid=0 pqname= pqid=0 ]
[ Evaluations: 0 Packets: 0 Bytes: 0 States: 0 ]
-@18 pass in on tun0 proto tcp from any to any port = ssh keep state
+@18 pass in on tun1000000 proto tcp from any to any port = ssh keep state
[ Skip steps: i=end d=end f=end p=end sa=end sp=end da=end ]
[ queue: qname= qid=0 pqname= pqid=0 ]
[ Evaluations: 0 Packets: 0 Bytes: 0 States: 0 ]
-@19 pass in on tun0 proto tcp from any to any port = smtp keep state
+@19 pass in on tun1000000 proto tcp from any to any port = smtp keep state
[ Skip steps: i=end d=end f=end p=end sa=end sp=end da=end ]
[ queue: qname= qid=0 pqname= pqid=0 ]
[ Evaluations: 0 Packets: 0 Bytes: 0 States: 0 ]
-@20 pass in on tun0 proto tcp from any to any port = domain keep state
+@20 pass in on tun1000000 proto tcp from any to any port = domain keep state
[ Skip steps: i=end d=end f=end p=end sa=end sp=end da=end ]
[ queue: qname= qid=0 pqname= pqid=0 ]
[ Evaluations: 0 Packets: 0 Bytes: 0 States: 0 ]
-@21 pass in on tun0 proto tcp from any to any port = auth keep state
+@21 pass in on tun1000000 proto tcp from any to any port = auth keep state
[ Skip steps: i=end d=end f=end p=end sa=end sp=end da=end dp=end ]
[ queue: qname= qid=0 pqname= pqid=0 ]
[ Evaluations: 0 Packets: 0 Bytes: 0 States: 0 ]
-block drop out log on tun0 all
-block drop in log on tun0 all
-block return-rst out log on tun0 proto tcp all
-block return-rst in log on tun0 proto tcp all
-block return-icmp(port-unr, port-unr) out log on tun0 proto udp all
-block return-icmp(port-unr, port-unr) in log on tun0 proto udp all
-block drop out log quick on tun0 inet from ! 157.161.48.183 to any
-block drop in quick on tun0 inet from any to 255.255.255.255
-block drop in log quick on tun0 inet from 10.0.0.0/8 to any
-block drop in log quick on tun0 inet from 172.16.0.0/12 to any
-block drop in log quick on tun0 inet from 192.168.0.0/16 to any
-block drop in log quick on tun0 inet from 255.255.255.255 to any
+block drop out log on tun1000000 all
+block drop in log on tun1000000 all
+block return-rst out log on tun1000000 proto tcp all
+block return-rst in log on tun1000000 proto tcp all
+block return-icmp(port-unr, port-unr) out log on tun1000000 proto udp all
+block return-icmp(port-unr, port-unr) in log on tun1000000 proto udp all
+block drop out log quick on tun1000000 inet from ! 157.161.48.183 to any
+block drop in quick on tun1000000 inet from any to 255.255.255.255
+block drop in log quick on tun1000000 inet from 10.0.0.0/8 to any
+block drop in log quick on tun1000000 inet from 172.16.0.0/12 to any
+block drop in log quick on tun1000000 inet from 192.168.0.0/16 to any
+block drop in log quick on tun1000000 inet from 255.255.255.255 to any
block drop in log quick from no-route to any
-pass out on tun0 inet proto icmp all icmp-type echoreq code 0 keep state
-pass in on tun0 inet proto icmp all icmp-type echoreq code 0 keep state
-pass out on tun0 proto udp all keep state
-pass in on tun0 proto udp from any to any port = domain keep state
-pass out on tun0 proto tcp all keep state
-pass in on tun0 proto tcp from any to any port = ssh keep state
-pass in on tun0 proto tcp from any to any port = smtp keep state
-pass in on tun0 proto tcp from any to any port = domain keep state
-pass in on tun0 proto tcp from any to any port = auth keep state
+pass out on tun1000000 inet proto icmp all icmp-type echoreq code 0 keep state
+pass in on tun1000000 inet proto icmp all icmp-type echoreq code 0 keep state
+pass out on tun1000000 proto udp all keep state
+pass in on tun1000000 proto udp from any to any port = domain keep state
+pass out on tun1000000 proto tcp all keep state
+pass in on tun1000000 proto tcp from any to any port = ssh keep state
+pass in on tun1000000 proto tcp from any to any port = smtp keep state
+pass in on tun1000000 proto tcp from any to any port = domain keep state
+pass in on tun1000000 proto tcp from any to any port = auth keep state
# Test whether list expansion in NAT/RDR works correctly
EVIL = "lo0"
-GOOD = "{ lo0, lo1 }"
+GOOD = "{ lo0, lo1000000 }"
GOOD_NET = "{ 127.0.0.0/24, 10.0.1.0/24 }"
DEST_NET = "{ 1.2.3.4/25, 2.4.6.8/30 }"
[ Skip steps: d=end f=end p=end sp=end dp=end ]
[ queue: qname= qid=0 pqname= pqid=0 ]
[ Evaluations: 0 Packets: 0 Bytes: 0 States: 0 ]
-@4 rdr on lo1 inet proto tcp from 127.0.0.0/24 to 1.2.3.0/25 port = ftp -> 127.0.0.1 port 8021
+@4 rdr on lo1000000 inet proto tcp from 127.0.0.0/24 to 1.2.3.0/25 port = ftp -> 127.0.0.1 port 8021
[ Skip steps: i=end d=end f=end p=end sa=6 sp=end dp=end ]
[ queue: qname= qid=0 pqname= pqid=0 ]
[ Evaluations: 0 Packets: 0 Bytes: 0 States: 0 ]
-@5 rdr on lo1 inet proto tcp from 127.0.0.0/24 to 2.4.6.8/30 port = ftp -> 127.0.0.1 port 8021
+@5 rdr on lo1000000 inet proto tcp from 127.0.0.0/24 to 2.4.6.8/30 port = ftp -> 127.0.0.1 port 8021
[ Skip steps: i=end d=end f=end p=end sp=end dp=end ]
[ queue: qname= qid=0 pqname= pqid=0 ]
[ Evaluations: 0 Packets: 0 Bytes: 0 States: 0 ]
-@6 rdr on lo1 inet proto tcp from 10.0.1.0/24 to 1.2.3.0/25 port = ftp -> 127.0.0.1 port 8021
+@6 rdr on lo1000000 inet proto tcp from 10.0.1.0/24 to 1.2.3.0/25 port = ftp -> 127.0.0.1 port 8021
[ Skip steps: i=end d=end f=end p=end sa=end sp=end dp=end ]
[ queue: qname= qid=0 pqname= pqid=0 ]
[ Evaluations: 0 Packets: 0 Bytes: 0 States: 0 ]
-@7 rdr on lo1 inet proto tcp from 10.0.1.0/24 to 2.4.6.8/30 port = ftp -> 127.0.0.1 port 8021
+@7 rdr on lo1000000 inet proto tcp from 10.0.1.0/24 to 2.4.6.8/30 port = ftp -> 127.0.0.1 port 8021
[ Skip steps: i=end d=end f=end p=end sa=end sp=end da=end dp=end ]
[ queue: qname= qid=0 pqname= pqid=0 ]
[ Evaluations: 0 Packets: 0 Bytes: 0 States: 0 ]
EVIL = "lo0"
-GOOD = "{ lo0, lo1 }"
+GOOD = "{ lo0, lo1000000 }"
GOOD_NET = "{ 127.0.0.0/24, 10.0.1.0/24 }"
DEST_NET = "{ 1.2.3.4/25, 2.4.6.8/30 }"
nat on lo0 inet from 127.0.0.0/24 to 1.2.3.0/25 -> 127.0.0.1
rdr on lo0 inet proto tcp from 127.0.0.0/24 to 2.4.6.8/30 port = ftp -> 127.0.0.1 port 8021
rdr on lo0 inet proto tcp from 10.0.1.0/24 to 1.2.3.0/25 port = ftp -> 127.0.0.1 port 8021
rdr on lo0 inet proto tcp from 10.0.1.0/24 to 2.4.6.8/30 port = ftp -> 127.0.0.1 port 8021
-rdr on lo1 inet proto tcp from 127.0.0.0/24 to 1.2.3.0/25 port = ftp -> 127.0.0.1 port 8021
-rdr on lo1 inet proto tcp from 127.0.0.0/24 to 2.4.6.8/30 port = ftp -> 127.0.0.1 port 8021
-rdr on lo1 inet proto tcp from 10.0.1.0/24 to 1.2.3.0/25 port = ftp -> 127.0.0.1 port 8021
-rdr on lo1 inet proto tcp from 10.0.1.0/24 to 2.4.6.8/30 port = ftp -> 127.0.0.1 port 8021
+rdr on lo1000000 inet proto tcp from 127.0.0.0/24 to 1.2.3.0/25 port = ftp -> 127.0.0.1 port 8021
+rdr on lo1000000 inet proto tcp from 127.0.0.0/24 to 2.4.6.8/30 port = ftp -> 127.0.0.1 port 8021
+rdr on lo1000000 inet proto tcp from 10.0.1.0/24 to 1.2.3.0/25 port = ftp -> 127.0.0.1 port 8021
+rdr on lo1000000 inet proto tcp from 10.0.1.0/24 to 2.4.6.8/30 port = ftp -> 127.0.0.1 port 8021
#test altq with interface expansion
#also tests multiple queues with the same name but on different interfaces
-altq on { lo0 lo1 } tbrsize 1824 cbq bandwidth 10Mb queue std
+altq on { lo0 lo1000000 } tbrsize 1824 cbq bandwidth 10Mb queue std
queue std cbq(default)
altq on lo0 cbq bandwidth 10Mb tbrsize 1824 queue { std }
-altq on lo1 cbq bandwidth 10Mb tbrsize 1824 queue { std }
+altq on lo1000000 cbq bandwidth 10Mb tbrsize 1824 queue { std }
queue std cbq( default )
# test
-pass in on tun0 proto tcp from any to any user bin
-pass in on tun0 proto tcp from any to any group bin
-pass in on tun0 proto tcp from any to any group wheel user root user bin
+pass in on tun1000000 proto tcp from any to any user bin
+pass in on tun1000000 proto tcp from any to any group bin
+pass in on tun1000000 proto tcp from any to any group wheel user root user bin
-@0 pass in on tun0 proto tcp all user = 3
+@0 pass in on tun1000000 proto tcp all user = 3
[ Skip steps: i=end d=end f=end p=end sa=end sp=end da=end dp=end ]
[ queue: qname= qid=0 pqname= pqid=0 ]
[ Evaluations: 0 Packets: 0 Bytes: 0 States: 0 ]
-@1 pass in on tun0 proto tcp all group = 7
+@1 pass in on tun1000000 proto tcp all group = 7
[ Skip steps: i=end d=end f=end p=end sa=end sp=end da=end dp=end ]
[ queue: qname= qid=0 pqname= pqid=0 ]
[ Evaluations: 0 Packets: 0 Bytes: 0 States: 0 ]
-@2 pass in on tun0 proto tcp all user = 3 group = 0
+@2 pass in on tun1000000 proto tcp all user = 3 group = 0
[ Skip steps: i=end d=end f=end p=end sa=end sp=end da=end dp=end ]
[ queue: qname= qid=0 pqname= pqid=0 ]
[ Evaluations: 0 Packets: 0 Bytes: 0 States: 0 ]
-@3 pass in on tun0 proto tcp all user = 0 group = 0
+@3 pass in on tun1000000 proto tcp all user = 0 group = 0
[ Skip steps: i=end d=end f=end p=end sa=end sp=end da=end dp=end ]
[ queue: qname= qid=0 pqname= pqid=0 ]
[ Evaluations: 0 Packets: 0 Bytes: 0 States: 0 ]
-pass in on tun0 proto tcp all user = 3
-pass in on tun0 proto tcp all group = 7
-pass in on tun0 proto tcp all user = 3 group = 0
-pass in on tun0 proto tcp all user = 0 group = 0
+pass in on tun1000000 proto tcp all user = 3
+pass in on tun1000000 proto tcp all group = 7
+pass in on tun1000000 proto tcp all user = 3 group = 0
+pass in on tun1000000 proto tcp all user = 0 group = 0
# queue on two interfaces
-altq on ppp0 bandwidth 100Kb cbq queue { std ssh }
-altq on gif3 bandwidth 10Mb cbq queue { blah ssh }
+altq on tun1000000 bandwidth 100Kb cbq queue { std ssh }
+altq on tun1000001 bandwidth 10Mb cbq queue { blah ssh }
queue std bandwidth 10% cbq(borrow, default)
queue ssh bandwidth 30% cbq(borrow) { ssh2 }
queue ssh2 bandwidth 80%
-altq on ppp0 cbq bandwidth 100Kb tbrsize 1500 queue { std ssh }
-altq on gif3 cbq bandwidth 10Mb tbrsize 5120 queue { blah ssh }
+altq on tun1000000 cbq bandwidth 100Kb tbrsize 3000 queue { std ssh }
+altq on tun1000001 cbq bandwidth 10Mb tbrsize 12000 queue { blah ssh }
queue std bandwidth 10% cbq( borrow default )
queue ssh bandwidth 30% cbq( borrow ) { ssh2 }
queue ssh2 bandwidth 80%
#tests an edge case in LOOP_THROUGH behaviour, the one loop despite the
#list is empty
-altq on { lo0 tun0 } priq bandwidth 10Mb tbrsize 1824 queue q_def
+altq on { lo0 tun1000000 } priq bandwidth 10Mb tbrsize 1824 queue q_def
queue q_def priq(default)
altq on lo0 priq bandwidth 10Mb tbrsize 1824 queue { q_def }
-altq on tun0 priq bandwidth 10Mb tbrsize 1824 queue { q_def }
+altq on tun1000000 priq bandwidth 10Mb tbrsize 1824 queue { q_def }
queue q_def priq( default )
# try to provoke them
altq on lo0 tbrsize 1824 bandwidth 10Mb hfsc queue { eins zwei drei }
-altq on tun0 tbrsize 1824 bandwidth 100Mb hfsc queue { eins zwei drei }
+altq on tun1000000 tbrsize 1824 bandwidth 100Mb hfsc queue { eins zwei drei }
queue eins bandwidth 10% hfsc(default linkshare(20% 20 5%) realtime 500Kb)
queue zwei bandwidth 40% hfsc(linkshare(35% 10 25%) upperlimit 5Mb)
queue drei bandwidth 50% hfsc(linkshare(60% 20 4Mb) \
altq on lo0 hfsc bandwidth 10Mb tbrsize 1824 queue { eins zwei drei }
-altq on tun0 hfsc bandwidth 100Mb tbrsize 1824 queue { eins zwei drei }
+altq on tun1000000 hfsc bandwidth 100Mb tbrsize 1824 queue { eins zwei drei }
queue eins bandwidth 10% hfsc( default realtime 500Kb linkshare(20% 20 5%) )
queue zwei bandwidth 40% hfsc( linkshare(35% 10 25%) upperlimit 5Mb )
queue drei bandwidth 50% hfsc( linkshare(60% 20 4Mb) upperlimit(65% 10 45%) )
-pass in quick on tun0 keep state tag regress
+pass in quick on tun1000000 keep state tag regress
pass out quick on lo0 keep state tagged regress
-@0 pass in quick on tun0 all keep state tag regress
+@0 pass in quick on tun1000000 all keep state tag regress
[ Skip steps: f=end p=end sa=end sp=end da=end dp=end ]
[ queue: qname= qid=0 pqname= pqid=0 ]
[ Evaluations: 0 Packets: 0 Bytes: 0 States: 0 ]
-pass in quick on tun0 all keep state tag regress
+pass in quick on tun1000000 all keep state tag regress
pass out quick on lo0 all keep state tagged regress
scrub in proto tcp from { <regress.1> !<regress.2> } to any
scrub in inet proto tcp from { 10.0.0.1, 10.0.0.2 } to { 10.0.0.3, 10.0.0.4 }
scrub in log on lo0 proto tcp from any to any min-ttl 25
-scrub in log on lo0 inet6 proto tcp from { (lo1), (lo0) } to 2000::1
-scrub in log on {lo0 lo1} proto tcp from any to any
+scrub in log on lo0 inet6 proto tcp from { (lo1000000), (lo0) } to 2000::1
+scrub in log on {lo0 lo1000000} proto tcp from any to any
scrub in on lo0 proto tcp all
scrub in on lo0 proto tcp from any to any fragment reassemble max-mss 224 min-ttl 15 no-df
scrub in on lo0 proto tcp from any to any max-mss 224
scrub on lo0 proto tcp from any to any max-mss 224
scrub out proto tcp
scrub out proto tcp from any to { !<regress.1>, <regress.2> }
-scrub out log on lo1 proto tcp from any to 10.0.0.1 no-df max-mss 224
+scrub out log on lo1000000 proto tcp from any to 10.0.0.1 no-df max-mss 224
scrub proto tcp random-id
scrub proto tcp from any to any port 80
scrub in proto tcp from { <regress.1> !<regress.2> } to any port 80
scrub in inet proto tcp from { 10.0.0.1, 10.0.0.2 } to { 10.0.0.3, 10.0.0.4 } port 80
scrub in log on lo0 proto tcp from any to any port 80 min-ttl 25
-scrub in log on lo0 inet6 proto tcp from { (lo1), (lo0) } port 80 to 2000::1
-scrub in log on {lo0 lo1} proto tcp from any port 80 to any
+scrub in log on lo0 inet6 proto tcp from { (lo1000000), (lo0) } port 80 to 2000::1
+scrub in log on {lo0 lo1000000} proto tcp from any port 80 to any
scrub in on lo0 proto tcp from any port {80, 81} to any fragment reassemble max-mss 224 min-ttl 15 no-df
scrub in on lo0 proto tcp from any to any port 80 max-mss 224
scrub in on lo0 proto tcp from any port 80 to any max-mss 224 min-ttl 15 no-df fragment reassemble
scrub in on lo0 inet proto tcp from (lo0) port 80 to any
scrub on lo0 proto tcp from any to any port 80 max-mss 224
scrub out proto tcp from any to { !<regress.1>, <regress.2> } port 80
-scrub out log on lo1 proto tcp from any to 10.0.0.1 port 80 no-df max-mss 224
+scrub out log on lo1000000 proto tcp from any to 10.0.0.1 port 80 no-df max-mss 224
[ Skip steps: i=18 d=29 p=end sp=43 dp=35 ]
[ queue: qname= qid=0 pqname= pqid=0 ]
[ Evaluations: 0 Packets: 0 Bytes: 0 States: 0 ]
-@15 scrub in log on lo0 inet6 proto tcp from (lo1) to 2000::1 fragment reassemble
+@15 scrub in log on lo0 inet6 proto tcp from (lo1000000) to 2000::1 fragment reassemble
[ Skip steps: i=18 d=29 f=17 p=end sp=43 da=17 dp=35 ]
[ queue: qname= qid=0 pqname= pqid=0 ]
[ Evaluations: 0 Packets: 0 Bytes: 0 States: 0 ]
[ Skip steps: d=29 f=28 p=end sa=28 sp=43 da=31 dp=35 ]
[ queue: qname= qid=0 pqname= pqid=0 ]
[ Evaluations: 0 Packets: 0 Bytes: 0 States: 0 ]
-@18 scrub in log on lo1 proto tcp all fragment reassemble
+@18 scrub in log on lo1000000 proto tcp all fragment reassemble
[ Skip steps: d=29 f=28 p=end sa=28 sp=43 da=31 dp=35 ]
[ queue: qname= qid=0 pqname= pqid=0 ]
[ Evaluations: 0 Packets: 0 Bytes: 0 States: 0 ]
[ Skip steps: d=34 p=end sa=36 sp=43 dp=35 ]
[ queue: qname= qid=0 pqname= pqid=0 ]
[ Evaluations: 0 Packets: 0 Bytes: 0 States: 0 ]
-@33 scrub out log on lo1 inet proto tcp from any to 10.0.0.1 no-df max-mss 224 fragment reassemble
+@33 scrub out log on lo1000000 inet proto tcp from any to 10.0.0.1 no-df max-mss 224 fragment reassemble
[ Skip steps: p=end sa=36 sp=43 dp=35 ]
[ queue: qname= qid=0 pqname= pqid=0 ]
[ Evaluations: 0 Packets: 0 Bytes: 0 States: 0 ]
[ Skip steps: i=46 d=62 p=end ]
[ queue: qname= qid=0 pqname= pqid=0 ]
[ Evaluations: 0 Packets: 0 Bytes: 0 States: 0 ]
-@43 scrub in log on lo0 inet6 proto tcp from (lo1) port = www to 2000::1 fragment reassemble
+@43 scrub in log on lo0 inet6 proto tcp from (lo1000000) port = www to 2000::1 fragment reassemble
[ Skip steps: i=46 d=62 f=45 p=end sp=48 da=45 dp=49 ]
[ queue: qname= qid=0 pqname= pqid=0 ]
[ Evaluations: 0 Packets: 0 Bytes: 0 States: 0 ]
[ Skip steps: d=62 f=61 p=end sa=61 sp=48 da=63 dp=49 ]
[ queue: qname= qid=0 pqname= pqid=0 ]
[ Evaluations: 0 Packets: 0 Bytes: 0 States: 0 ]
-@46 scrub in log on lo1 proto tcp from any port = www to any fragment reassemble
+@46 scrub in log on lo1000000 proto tcp from any port = www to any fragment reassemble
[ Skip steps: d=62 f=61 p=end sa=61 sp=48 da=63 dp=49 ]
[ queue: qname= qid=0 pqname= pqid=0 ]
[ Evaluations: 0 Packets: 0 Bytes: 0 States: 0 ]
[ Skip steps: d=end p=end sa=end sp=end dp=end ]
[ queue: qname= qid=0 pqname= pqid=0 ]
[ Evaluations: 0 Packets: 0 Bytes: 0 States: 0 ]
-@65 scrub out log on lo1 inet proto tcp from any to 10.0.0.1 port = www no-df max-mss 224 fragment reassemble
+@65 scrub out log on lo1000000 inet proto tcp from any to 10.0.0.1 port = www no-df max-mss 224 fragment reassemble
[ Skip steps: i=end d=end f=end p=end sa=end sp=end da=end dp=end ]
[ queue: qname= qid=0 pqname= pqid=0 ]
[ Evaluations: 0 Packets: 0 Bytes: 0 States: 0 ]
scrub in inet proto tcp from 10.0.0.2 to 10.0.0.3 fragment reassemble
scrub in inet proto tcp from 10.0.0.2 to 10.0.0.4 fragment reassemble
scrub in log on lo0 proto tcp all min-ttl 25 fragment reassemble
-scrub in log on lo0 inet6 proto tcp from (lo1) to 2000::1 fragment reassemble
+scrub in log on lo0 inet6 proto tcp from (lo1000000) to 2000::1 fragment reassemble
scrub in log on lo0 inet6 proto tcp from (lo0) to 2000::1 fragment reassemble
scrub in log on lo0 proto tcp all fragment reassemble
-scrub in log on lo1 proto tcp all fragment reassemble
+scrub in log on lo1000000 proto tcp all fragment reassemble
scrub in on lo0 proto tcp all fragment reassemble
scrub in on lo0 proto tcp all no-df min-ttl 15 max-mss 224 fragment reassemble
scrub in on lo0 proto tcp all max-mss 224 fragment reassemble
scrub out proto tcp all fragment reassemble
scrub out proto tcp from any to ! <regress.1> fragment reassemble
scrub out proto tcp from any to <regress.2> fragment reassemble
-scrub out log on lo1 inet proto tcp from any to 10.0.0.1 no-df max-mss 224 fragment reassemble
+scrub out log on lo1000000 inet proto tcp from any to 10.0.0.1 no-df max-mss 224 fragment reassemble
scrub proto tcp all random-id fragment reassemble
scrub proto tcp from any to any port = www fragment reassemble
scrub in proto tcp from <regress.1> to any port = www fragment reassemble
scrub in inet proto tcp from 10.0.0.2 to 10.0.0.3 port = www fragment reassemble
scrub in inet proto tcp from 10.0.0.2 to 10.0.0.4 port = www fragment reassemble
scrub in log on lo0 proto tcp from any to any port = www min-ttl 25 fragment reassemble
-scrub in log on lo0 inet6 proto tcp from (lo1) port = www to 2000::1 fragment reassemble
+scrub in log on lo0 inet6 proto tcp from (lo1000000) port = www to 2000::1 fragment reassemble
scrub in log on lo0 inet6 proto tcp from (lo0) port = www to 2000::1 fragment reassemble
scrub in log on lo0 proto tcp from any port = www to any fragment reassemble
-scrub in log on lo1 proto tcp from any port = www to any fragment reassemble
+scrub in log on lo1000000 proto tcp from any port = www to any fragment reassemble
scrub in on lo0 proto tcp from any port = www to any no-df min-ttl 15 max-mss 224 fragment reassemble
scrub in on lo0 proto tcp from any port = 81 to any no-df min-ttl 15 max-mss 224 fragment reassemble
scrub in on lo0 proto tcp from any to any port = www max-mss 224 fragment reassemble
scrub on lo0 proto tcp from any to any port = www max-mss 224 fragment reassemble
scrub out proto tcp from any to ! <regress.1> port = www fragment reassemble
scrub out proto tcp from any to <regress.2> port = www fragment reassemble
-scrub out log on lo1 inet proto tcp from any to 10.0.0.1 port = www no-df max-mss 224 fragment reassemble
+scrub out log on lo1000000 inet proto tcp from any to 10.0.0.1 port = www no-df max-mss 224 fragment reassemble
# test modulate state
-block out log on tun0 all
-block in log on tun0 all
+block out log on tun1000000 all
+block in log on tun1000000 all
-block return-rst out log on tun0 proto tcp all
-block return-rst in log on tun0 proto tcp all
-block return-icmp out log on tun0 proto udp all
-block return-icmp in log on tun0 proto udp all
+block return-rst out log on tun1000000 proto tcp all
+block return-rst in log on tun1000000 proto tcp all
+block return-icmp out log on tun1000000 proto udp all
+block return-icmp in log on tun1000000 proto udp all
-block out log quick on tun0 from ! 157.161.48.183 to any
+block out log quick on tun1000000 from ! 157.161.48.183 to any
-block in quick on tun0 from any to 255.255.255.255
+block in quick on tun1000000 from any to 255.255.255.255
-block in log quick on tun0 from 10.0.0.0/8 to any
-block in log quick on tun0 from 172.16.0.0/12 to any
-block in log quick on tun0 from 192.168.0.0/16 to any
-block in log quick on tun0 from 255.255.255.255/32 to any
+block in log quick on tun1000000 from 10.0.0.0/8 to any
+block in log quick on tun1000000 from 172.16.0.0/12 to any
+block in log quick on tun1000000 from 192.168.0.0/16 to any
+block in log quick on tun1000000 from 255.255.255.255/32 to any
-pass out on tun0 inet proto icmp all icmp-type 8 code 0 keep state
-pass in on tun0 inet proto icmp all icmp-type 8 code 0 keep state
+pass out on tun1000000 inet proto icmp all icmp-type 8 code 0 keep state
+pass in on tun1000000 inet proto icmp all icmp-type 8 code 0 keep state
-pass out on tun0 proto udp all keep state
+pass out on tun1000000 proto udp all keep state
-pass in on tun0 proto udp from any to any port = domain keep state
+pass in on tun1000000 proto udp from any to any port = domain keep state
-pass out on tun0 proto tcp all modulate state
+pass out on tun1000000 proto tcp all modulate state
-pass in on tun0 proto tcp from any to any port = ssh modulate state
-pass in on tun0 proto tcp from any to any port = smtp modulate state
-pass in on tun0 proto tcp from any to any port = domain modulate state
-pass in on tun0 proto tcp from any to any port = auth modulate state
+pass in on tun1000000 proto tcp from any to any port = ssh modulate state
+pass in on tun1000000 proto tcp from any to any port = smtp modulate state
+pass in on tun1000000 proto tcp from any to any port = domain modulate state
+pass in on tun1000000 proto tcp from any to any port = auth modulate state
-@0 block drop out log on tun0 all
+@0 block drop out log on tun1000000 all
[ Skip steps: i=end f=6 p=2 sa=6 sp=end da=7 dp=15 ]
[ queue: qname= qid=0 pqname= pqid=0 ]
[ Evaluations: 0 Packets: 0 Bytes: 0 States: 0 ]
-@1 block drop in log on tun0 all
+@1 block drop in log on tun1000000 all
[ Skip steps: i=end f=6 sa=6 sp=end da=7 dp=15 ]
[ queue: qname= qid=0 pqname= pqid=0 ]
[ Evaluations: 0 Packets: 0 Bytes: 0 States: 0 ]
-@2 block return-rst out log on tun0 proto tcp all
+@2 block return-rst out log on tun1000000 proto tcp all
[ Skip steps: i=end f=6 p=4 sa=6 sp=end da=7 dp=15 ]
[ queue: qname= qid=0 pqname= pqid=0 ]
[ Evaluations: 0 Packets: 0 Bytes: 0 States: 0 ]
-@3 block return-rst in log on tun0 proto tcp all
+@3 block return-rst in log on tun1000000 proto tcp all
[ Skip steps: i=end f=6 sa=6 sp=end da=7 dp=15 ]
[ queue: qname= qid=0 pqname= pqid=0 ]
[ Evaluations: 0 Packets: 0 Bytes: 0 States: 0 ]
-@4 block return-icmp(port-unr, port-unr) out log on tun0 proto udp all
+@4 block return-icmp(port-unr, port-unr) out log on tun1000000 proto udp all
[ Skip steps: i=end f=6 p=6 sa=6 sp=end da=7 dp=15 ]
[ queue: qname= qid=0 pqname= pqid=0 ]
[ Evaluations: 0 Packets: 0 Bytes: 0 States: 0 ]
-@5 block return-icmp(port-unr, port-unr) in log on tun0 proto udp all
+@5 block return-icmp(port-unr, port-unr) in log on tun1000000 proto udp all
[ Skip steps: i=end sp=end da=7 dp=15 ]
[ queue: qname= qid=0 pqname= pqid=0 ]
[ Evaluations: 0 Packets: 0 Bytes: 0 States: 0 ]
-@6 block drop out log quick on tun0 inet from ! 157.161.48.183 to any
+@6 block drop out log quick on tun1000000 inet from ! 157.161.48.183 to any
[ Skip steps: i=end f=14 p=12 sp=end dp=15 ]
[ queue: qname= qid=0 pqname= pqid=0 ]
[ Evaluations: 0 Packets: 0 Bytes: 0 States: 0 ]
-@7 block drop in quick on tun0 inet from any to 255.255.255.255
+@7 block drop in quick on tun1000000 inet from any to 255.255.255.255
[ Skip steps: i=end d=12 f=14 p=12 sp=end dp=15 ]
[ queue: qname= qid=0 pqname= pqid=0 ]
[ Evaluations: 0 Packets: 0 Bytes: 0 States: 0 ]
-@8 block drop in log quick on tun0 inet from 10.0.0.0/8 to any
+@8 block drop in log quick on tun1000000 inet from 10.0.0.0/8 to any
[ Skip steps: i=end d=12 f=14 p=12 sp=end da=end dp=15 ]
[ queue: qname= qid=0 pqname= pqid=0 ]
[ Evaluations: 0 Packets: 0 Bytes: 0 States: 0 ]
-@9 block drop in log quick on tun0 inet from 172.16.0.0/12 to any
+@9 block drop in log quick on tun1000000 inet from 172.16.0.0/12 to any
[ Skip steps: i=end d=12 f=14 p=12 sp=end da=end dp=15 ]
[ queue: qname= qid=0 pqname= pqid=0 ]
[ Evaluations: 0 Packets: 0 Bytes: 0 States: 0 ]
-@10 block drop in log quick on tun0 inet from 192.168.0.0/16 to any
+@10 block drop in log quick on tun1000000 inet from 192.168.0.0/16 to any
[ Skip steps: i=end d=12 f=14 p=12 sp=end da=end dp=15 ]
[ queue: qname= qid=0 pqname= pqid=0 ]
[ Evaluations: 0 Packets: 0 Bytes: 0 States: 0 ]
-@11 block drop in log quick on tun0 inet from 255.255.255.255 to any
+@11 block drop in log quick on tun1000000 inet from 255.255.255.255 to any
[ Skip steps: i=end f=14 sp=end da=end dp=15 ]
[ queue: qname= qid=0 pqname= pqid=0 ]
[ Evaluations: 0 Packets: 0 Bytes: 0 States: 0 ]
-@12 pass out on tun0 inet proto icmp all icmp-type echoreq code 0 keep state
+@12 pass out on tun1000000 inet proto icmp all icmp-type echoreq code 0 keep state
[ Skip steps: i=end f=14 p=14 sa=end sp=end da=end dp=15 ]
[ queue: qname= qid=0 pqname= pqid=0 ]
[ Evaluations: 0 Packets: 0 Bytes: 0 States: 0 ]
-@13 pass in on tun0 inet proto icmp all icmp-type echoreq code 0 keep state
+@13 pass in on tun1000000 inet proto icmp all icmp-type echoreq code 0 keep state
[ Skip steps: i=end sa=end sp=end da=end dp=15 ]
[ queue: qname= qid=0 pqname= pqid=0 ]
[ Evaluations: 0 Packets: 0 Bytes: 0 States: 0 ]
-@14 pass out on tun0 proto udp all keep state
+@14 pass out on tun1000000 proto udp all keep state
[ Skip steps: i=end f=end p=16 sa=end sp=end da=end ]
[ queue: qname= qid=0 pqname= pqid=0 ]
[ Evaluations: 0 Packets: 0 Bytes: 0 States: 0 ]
-@15 pass in on tun0 proto udp from any to any port = domain keep state
+@15 pass in on tun1000000 proto udp from any to any port = domain keep state
[ Skip steps: i=end f=end sa=end sp=end da=end ]
[ queue: qname= qid=0 pqname= pqid=0 ]
[ Evaluations: 0 Packets: 0 Bytes: 0 States: 0 ]
-@16 pass out on tun0 proto tcp all modulate state
+@16 pass out on tun1000000 proto tcp all modulate state
[ Skip steps: i=end f=end p=end sa=end sp=end da=end ]
[ queue: qname= qid=0 pqname= pqid=0 ]
[ Evaluations: 0 Packets: 0 Bytes: 0 States: 0 ]
-@17 pass in on tun0 proto tcp from any to any port = ssh modulate state
+@17 pass in on tun1000000 proto tcp from any to any port = ssh modulate state
[ Skip steps: i=end d=end f=end p=end sa=end sp=end da=end ]
[ queue: qname= qid=0 pqname= pqid=0 ]
[ Evaluations: 0 Packets: 0 Bytes: 0 States: 0 ]
-@18 pass in on tun0 proto tcp from any to any port = smtp modulate state
+@18 pass in on tun1000000 proto tcp from any to any port = smtp modulate state
[ Skip steps: i=end d=end f=end p=end sa=end sp=end da=end ]
[ queue: qname= qid=0 pqname= pqid=0 ]
[ Evaluations: 0 Packets: 0 Bytes: 0 States: 0 ]
-@19 pass in on tun0 proto tcp from any to any port = domain modulate state
+@19 pass in on tun1000000 proto tcp from any to any port = domain modulate state
[ Skip steps: i=end d=end f=end p=end sa=end sp=end da=end ]
[ queue: qname= qid=0 pqname= pqid=0 ]
[ Evaluations: 0 Packets: 0 Bytes: 0 States: 0 ]
-@20 pass in on tun0 proto tcp from any to any port = auth modulate state
+@20 pass in on tun1000000 proto tcp from any to any port = auth modulate state
[ Skip steps: i=end d=end f=end p=end sa=end sp=end da=end dp=end ]
[ queue: qname= qid=0 pqname= pqid=0 ]
[ Evaluations: 0 Packets: 0 Bytes: 0 States: 0 ]
-block drop out log on tun0 all
-block drop in log on tun0 all
-block return-rst out log on tun0 proto tcp all
-block return-rst in log on tun0 proto tcp all
-block return-icmp(port-unr, port-unr) out log on tun0 proto udp all
-block return-icmp(port-unr, port-unr) in log on tun0 proto udp all
-block drop out log quick on tun0 inet from ! 157.161.48.183 to any
-block drop in quick on tun0 inet from any to 255.255.255.255
-block drop in log quick on tun0 inet from 10.0.0.0/8 to any
-block drop in log quick on tun0 inet from 172.16.0.0/12 to any
-block drop in log quick on tun0 inet from 192.168.0.0/16 to any
-block drop in log quick on tun0 inet from 255.255.255.255 to any
-pass out on tun0 inet proto icmp all icmp-type echoreq code 0 keep state
-pass in on tun0 inet proto icmp all icmp-type echoreq code 0 keep state
-pass out on tun0 proto udp all keep state
-pass in on tun0 proto udp from any to any port = domain keep state
-pass out on tun0 proto tcp all modulate state
-pass in on tun0 proto tcp from any to any port = ssh modulate state
-pass in on tun0 proto tcp from any to any port = smtp modulate state
-pass in on tun0 proto tcp from any to any port = domain modulate state
-pass in on tun0 proto tcp from any to any port = auth modulate state
+block drop out log on tun1000000 all
+block drop in log on tun1000000 all
+block return-rst out log on tun1000000 proto tcp all
+block return-rst in log on tun1000000 proto tcp all
+block return-icmp(port-unr, port-unr) out log on tun1000000 proto udp all
+block return-icmp(port-unr, port-unr) in log on tun1000000 proto udp all
+block drop out log quick on tun1000000 inet from ! 157.161.48.183 to any
+block drop in quick on tun1000000 inet from any to 255.255.255.255
+block drop in log quick on tun1000000 inet from 10.0.0.0/8 to any
+block drop in log quick on tun1000000 inet from 172.16.0.0/12 to any
+block drop in log quick on tun1000000 inet from 192.168.0.0/16 to any
+block drop in log quick on tun1000000 inet from 255.255.255.255 to any
+pass out on tun1000000 inet proto icmp all icmp-type echoreq code 0 keep state
+pass in on tun1000000 inet proto icmp all icmp-type echoreq code 0 keep state
+pass out on tun1000000 proto udp all keep state
+pass in on tun1000000 proto udp from any to any port = domain keep state
+pass out on tun1000000 proto tcp all modulate state
+pass in on tun1000000 proto tcp from any to any port = ssh modulate state
+pass in on tun1000000 proto tcp from any to any port = smtp modulate state
+pass in on tun1000000 proto tcp from any to any port = domain modulate state
+pass in on tun1000000 proto tcp from any to any port = auth modulate state
scrub proto tcp from { <regress.1> !<regress.2> } to any reassemble tcp
scrub inet proto tcp from { 10.0.0.1, 10.0.0.2 } to { 10.0.0.3, 10.0.0.4 } reassemble tcp
scrub log on lo0 proto tcp from any to any min-ttl 25 reassemble tcp
-scrub log on lo0 inet6 proto tcp from { (lo1), (lo0) } to 2000::1 reassemble tcp
-scrub log on {lo0 lo1} proto tcp from any to any reassemble tcp
+scrub log on lo0 inet6 proto tcp from { (lo1000000), (lo0) } to 2000::1 reassemble tcp
+scrub log on {lo0 lo1000000} proto tcp from any to any reassemble tcp
scrub on lo0 proto tcp all reassemble tcp
scrub on lo0 proto tcp from any to any fragment reassemble max-mss 224 min-ttl 15 no-df reassemble tcp
[ Skip steps: i=16 d=end p=end sp=end dp=end ]
[ queue: qname= qid=0 pqname= pqid=0 ]
[ Evaluations: 0 Packets: 0 Bytes: 0 States: 0 ]
-@13 scrub log on lo0 inet6 proto tcp from (lo1) to 2000::1 reassemble tcp fragment reassemble
+@13 scrub log on lo0 inet6 proto tcp from (lo1000000) to 2000::1 reassemble tcp fragment reassemble
[ Skip steps: i=16 d=end f=15 p=end sp=end da=15 dp=end ]
[ queue: qname= qid=0 pqname= pqid=0 ]
[ Evaluations: 0 Packets: 0 Bytes: 0 States: 0 ]
[ Skip steps: d=end f=end p=end sa=end sp=end da=end dp=end ]
[ queue: qname= qid=0 pqname= pqid=0 ]
[ Evaluations: 0 Packets: 0 Bytes: 0 States: 0 ]
-@16 scrub log on lo1 proto tcp all reassemble tcp fragment reassemble
+@16 scrub log on lo1000000 proto tcp all reassemble tcp fragment reassemble
[ Skip steps: d=end f=end p=end sa=end sp=end da=end dp=end ]
[ queue: qname= qid=0 pqname= pqid=0 ]
[ Evaluations: 0 Packets: 0 Bytes: 0 States: 0 ]
scrub inet proto tcp from 10.0.0.2 to 10.0.0.3 reassemble tcp fragment reassemble
scrub inet proto tcp from 10.0.0.2 to 10.0.0.4 reassemble tcp fragment reassemble
scrub log on lo0 proto tcp all min-ttl 25 reassemble tcp fragment reassemble
-scrub log on lo0 inet6 proto tcp from (lo1) to 2000::1 reassemble tcp fragment reassemble
+scrub log on lo0 inet6 proto tcp from (lo1000000) to 2000::1 reassemble tcp fragment reassemble
scrub log on lo0 inet6 proto tcp from (lo0) to 2000::1 reassemble tcp fragment reassemble
scrub log on lo0 proto tcp all reassemble tcp fragment reassemble
-scrub log on lo1 proto tcp all reassemble tcp fragment reassemble
+scrub log on lo1000000 proto tcp all reassemble tcp fragment reassemble
scrub on lo0 proto tcp all reassemble tcp fragment reassemble
scrub on lo0 proto tcp all no-df min-ttl 15 max-mss 224 reassemble tcp fragment reassemble
extern = "{ ! 10.0.0.0/8, 10.1.2.3 }"
-block out log on tun1 from $extern to any
+block out log on tun1000001 from $extern to any
-@0 block drop out log on tun1 inet from ! 10.0.0.0/8 to any
+@0 block drop out log on tun1000001 inet from ! 10.0.0.0/8 to any
[ Skip steps: i=end d=end f=end p=end sp=end da=end dp=end ]
[ queue: qname= qid=0 pqname= pqid=0 ]
[ Evaluations: 0 Packets: 0 Bytes: 0 States: 0 ]
-@1 block drop out log on tun1 inet from 10.1.2.3 to any
+@1 block drop out log on tun1000001 inet from 10.1.2.3 to any
[ Skip steps: i=end d=end f=end p=end sa=end sp=end da=end dp=end ]
[ queue: qname= qid=0 pqname= pqid=0 ]
[ Evaluations: 0 Packets: 0 Bytes: 0 States: 0 ]
extern = "{ ! 10.0.0.0/8, 10.1.2.3 }"
-block drop out log on tun1 inet from ! 10.0.0.0/8 to any
-block drop out log on tun1 inet from 10.1.2.3 to any
+block drop out log on tun1000001 inet from ! 10.0.0.0/8 to any
+block drop out log on tun1000001 inet from 10.1.2.3 to any
# test antispoof with ip-less interface
-antispoof for lo1
+antispoof for lo1000000
-interfaces = "{ enc0, tun0 }"
+interfaces = "{ enc0, tun1000000 }"
block in on $interfaces all
[ Skip steps: d=end f=end p=end sa=end sp=end da=end dp=end ]
[ queue: qname= qid=0 pqname= pqid=0 ]
[ Evaluations: 0 Packets: 0 Bytes: 0 States: 0 ]
-@1 block drop in on tun0 all
+@1 block drop in on tun1000000 all
[ Skip steps: i=end d=end f=end p=end sa=end sp=end da=end dp=end ]
[ queue: qname= qid=0 pqname= pqid=0 ]
[ Evaluations: 0 Packets: 0 Bytes: 0 States: 0 ]
-interfaces = "{ enc0, tun0 }"
+interfaces = "{ enc0, tun1000000 }"
block drop in on enc0 all
-block drop in on tun0 all
+block drop in on tun1000000 all
# Test rule order processing: should fail unless scrub -> nat -> filter
nat on lo0 all -> lo0
-pass in on lo1 all
+pass in on lo1000000 all
scrub in on lo0 all
stdin:4: Rules must be in order: options, normalization, queueing, translation, filtering
nat on lo0 inet all -> 127.0.0.1
-pass in on lo1 all
+pass in on lo1000000 all
pass in proto { udp, icmp } from any to any flags S/SA
#no routing address with matching address family found
-pass out dup-to (tun0 1.1.1.1) inet6 all
+pass out dup-to (tun1000000 1.1.1.1) inet6 all
# invalid binat stuff
-binat on lo0 from (lo0) to (lo1) -> (lo0)
-binat on lo0 from (lo0) to no-route -> (lo1)
+binat on lo0 from (lo0) to (lo1000000) -> (lo0)
+binat on lo0 from (lo0) to no-route -> (lo1000000)
binat on lo0 from no-route to any -> 1.1.1.1
binat on lo0 from !1.1.1.1 to any -> 1.1.1.1
binat on lo0 from !(lo0) to any -> 1.1.1.1
binat on lo0 from 1.1.1.1 to any -> no-route
binat on lo0 from 1.1.1.1 to any -> !3.3.3.3
-binat on lo0 from 1.1.1.1 to any -> !(lo1)
-#binat on { lo0 lo1 } from 1.1.1.1 to any -> 2.2.2.2
+binat on lo0 from 1.1.1.1 to any -> !(lo1000000)
+#binat on { lo0 lo1000000 } from 1.1.1.1 to any -> 2.2.2.2
binat on lo0 from { 1.1.1.1 2.2.2.2 } to any -> 3.3.3.3
binat on lo0 from 1.1.1.1 to { 2.2.2.2 3.3.3.3 } -> 4.4.4.4
binat on lo0 from 1.1.1.1 to any -> { 1.1.1.1 2.2.2.2 }
-queue zwei already exists on interface gif3
+stdin:2: unknown interface gif3
+stdin:3: queue eins has no parent
+stdin:3: errors in queue definition
+stdin:4: queue zwei has no parent
stdin:4: errors in queue definition
-altq on gif3 cbq bandwidth 100Kb tbrsize 1280 queue { eins zwei }
-queue eins cbq( default ) { zwei }
-queue zwei
-stdin:3: unknown cbq flag "invalid"
+stdin:3: unknown interface gif2
-stdin:3: unknown priq flag "invalid"
+stdin:3: unknown interface gif2
-block in quick on tun0 dup-to (tun1 fec0::1) from any to 192.168.1.0/24
-block in quick on tun0 dup-to (tun1 192.168.1.1) from any to fec0::1/128
+block in quick on tun1000000 dup-to (tun1000001 fec0::1) from any to 192.168.1.0/24
+block in quick on tun1000000 dup-to (tun1000001 192.168.1.1) from any to fec0::1/128
# Test rule order processing: should fail unless scrub -> nat -> filter
scrub in on lo0 all
-pass in on lo1 all
+pass in on lo1000000 all
# bork
nat on lo0 all -> lo0
stdin:5: Rules must be in order: options, normalization, queueing, translation, filtering
scrub in on lo0 all fragment reassemble
-pass in on lo1 all
+pass in on lo1000000 all
#queue id assignment with priq
-altq on { lo0 tun0 } tbrsize 1824 priq bandwidth 10Mb queue { one two }
+altq on { lo0 tun1000000 } tbrsize 1824 priq bandwidth 10Mb queue { one two }
queue one priority 1 priq(default)
queue two priority 15
queue one priq( default )
[ qid=2 ifname=lo0 ifbandwidth=10Mb ]
queue one priq( default )
- [ qid=2 ifname=tun0 ifbandwidth=10Mb ]
+ [ qid=2 ifname=tun1000000 ifbandwidth=10Mb ]
queue two priority 15
[ qid=3 ifname=lo0 ifbandwidth=10Mb ]
queue two priority 15
- [ qid=3 ifname=tun0 ifbandwidth=10Mb ]
+ [ qid=3 ifname=tun1000000 ifbandwidth=10Mb ]
#queue id assignment with hfsc: two same named queues on different interfaces
#must have the same qid
-altq on { lo0 tun0 } tbrsize 1824 hfsc bandwidth 10Mb queue { one two }
+altq on { lo0 tun1000000 } tbrsize 1824 hfsc bandwidth 10Mb queue { one two }
queue one bandwidth 10% hfsc(default)
queue two bandwidth 90% { three four}
queue three bandwidth 50%
[ qid=4 ifname=lo0 ifbandwidth=10Mb ]
queue four bandwidth 3.60Mb
[ qid=5 ifname=lo0 ifbandwidth=10Mb ]
-queue root_tun0 bandwidth 10Mb priority 0 {one, two}
- [ qid=1 ifname=tun0 ifbandwidth=10Mb ]
+queue root_tun1000000 bandwidth 10Mb priority 0 {one, two}
+ [ qid=1 ifname=tun1000000 ifbandwidth=10Mb ]
queue one bandwidth 1Mb hfsc( default )
- [ qid=2 ifname=tun0 ifbandwidth=10Mb ]
+ [ qid=2 ifname=tun1000000 ifbandwidth=10Mb ]
queue two bandwidth 9Mb {three, four}
- [ qid=3 ifname=tun0 ifbandwidth=10Mb ]
+ [ qid=3 ifname=tun1000000 ifbandwidth=10Mb ]
queue three bandwidth 4.50Mb
- [ qid=4 ifname=tun0 ifbandwidth=10Mb ]
+ [ qid=4 ifname=tun1000000 ifbandwidth=10Mb ]
queue four bandwidth 3.60Mb
- [ qid=5 ifname=tun0 ifbandwidth=10Mb ]
+ [ qid=5 ifname=tun1000000 ifbandwidth=10Mb ]
# -two differently named queues must not share a qid, even on different ifs
altq on lo0 tbrsize 1824 bandwidth 10Mb hfsc queue { eins zwei drei }
-altq on tun0 tbrsize 1824 bandwidth 33600b hfsc queue { vier zwei fuenf }
+altq on tun1000000 tbrsize 1824 bandwidth 33600b hfsc queue { vier zwei fuenf }
queue eins bandwidth 10% hfsc(default)
queue zwei bandwidth 80% { sub2 sub3 }
queue sub2 bandwidth 50%
[ qid=6 ifname=lo0 ifbandwidth=10Mb ]
queue subseven bandwidth 900Kb
[ qid=9 ifname=lo0 ifbandwidth=10Mb ]
-queue root_tun0 bandwidth 33.60Kb priority 0 {zwei, vier, fuenf}
- [ qid=1 ifname=tun0 ifbandwidth=33.60Kb ]
+queue root_tun1000000 bandwidth 33.60Kb priority 0 {zwei, vier, fuenf}
+ [ qid=1 ifname=tun1000000 ifbandwidth=33.60Kb ]
queue zwei bandwidth 26.88Kb {sub2, sub3}
- [ qid=3 ifname=tun0 ifbandwidth=33.60Kb ]
+ [ qid=3 ifname=tun1000000 ifbandwidth=33.60Kb ]
queue sub2 bandwidth 13.40Kb
- [ qid=4 ifname=tun0 ifbandwidth=33.60Kb ]
+ [ qid=4 ifname=tun1000000 ifbandwidth=33.60Kb ]
queue sub3 bandwidth 13.40Kb
- [ qid=5 ifname=tun0 ifbandwidth=33.60Kb ]
+ [ qid=5 ifname=tun1000000 ifbandwidth=33.60Kb ]
queue vier bandwidth 3.36Kb hfsc( default )
- [ qid=7 ifname=tun0 ifbandwidth=33.60Kb ]
+ [ qid=7 ifname=tun1000000 ifbandwidth=33.60Kb ]
queue fuenf bandwidth 16.80Kb {subseven}
- [ qid=8 ifname=tun0 ifbandwidth=33.60Kb ]
+ [ qid=8 ifname=tun1000000 ifbandwidth=33.60Kb ]
queue subseven bandwidth 15.12Kb
- [ qid=9 ifname=tun0 ifbandwidth=33.60Kb ]
+ [ qid=9 ifname=tun1000000 ifbandwidth=33.60Kb ]
#queue id assignment with cbq: two same named queues on different interfaces
#must have the same qid
-altq on { lo0 tun0 } tbrsize 1824 cbq bandwidth 10Mb queue { one two }
+altq on { lo0 tun1000000 } tbrsize 1824 cbq bandwidth 10Mb queue { one two }
queue one bandwidth 10% cbq(default)
queue two bandwidth 90% { three four}
queue three bandwidth 50%
[ qid=3 ifname=lo0 ifbandwidth=10Mb ]
queue four bandwidth 3.60Mb
[ qid=4 ifname=lo0 ifbandwidth=10Mb ]
-queue root_tun0 bandwidth 10Mb priority 0 cbq( wrr root ) {one, two}
- [ qid=4294967294 ifname=tun0 ifbandwidth=10Mb ]
+queue root_tun1000000 bandwidth 10Mb priority 0 cbq( wrr root ) {one, two}
+ [ qid=4294967294 ifname=tun1000000 ifbandwidth=10Mb ]
queue one bandwidth 1Mb cbq( default )
- [ qid=4294967293 ifname=tun0 ifbandwidth=10Mb ]
+ [ qid=4294967293 ifname=tun1000000 ifbandwidth=10Mb ]
queue two bandwidth 9Mb {three, four}
- [ qid=2 ifname=tun0 ifbandwidth=10Mb ]
+ [ qid=2 ifname=tun1000000 ifbandwidth=10Mb ]
queue three bandwidth 4.50Mb
- [ qid=3 ifname=tun0 ifbandwidth=10Mb ]
+ [ qid=3 ifname=tun1000000 ifbandwidth=10Mb ]
queue four bandwidth 3.60Mb
- [ qid=4 ifname=tun0 ifbandwidth=10Mb ]
+ [ qid=4 ifname=tun1000000 ifbandwidth=10Mb ]
# -two differently named queues must not share a qid, even on different ifs
altq on lo0 tbrsize 1824 bandwidth 10Mb cbq queue { eins zwei drei }
-altq on tun0 tbrsize 1824 bandwidth 33600b cbq queue { vier zwei fuenf }
+altq on tun1000000 tbrsize 1824 bandwidth 33600b cbq queue { vier zwei fuenf }
queue eins bandwidth 10% cbq(default)
queue zwei bandwidth 80% { sub2 sub3 }
queue sub2 bandwidth 50%
[ qid=5 ifname=lo0 ifbandwidth=10Mb ]
queue subseven bandwidth 900Kb
[ qid=7 ifname=lo0 ifbandwidth=10Mb ]
-queue root_tun0 bandwidth 33.60Kb priority 0 cbq( wrr root ) {zwei, vier, fuenf}
- [ qid=4294967294 ifname=tun0 ifbandwidth=33.60Kb ]
+queue root_tun1000000 bandwidth 33.60Kb priority 0 cbq( wrr root ) {zwei, vier, fuenf}
+ [ qid=4294967294 ifname=tun1000000 ifbandwidth=33.60Kb ]
queue zwei bandwidth 26.88Kb {sub2, sub3}
- [ qid=2 ifname=tun0 ifbandwidth=33.60Kb ]
+ [ qid=2 ifname=tun1000000 ifbandwidth=33.60Kb ]
queue sub2 bandwidth 13.40Kb
- [ qid=3 ifname=tun0 ifbandwidth=33.60Kb ]
+ [ qid=3 ifname=tun1000000 ifbandwidth=33.60Kb ]
queue sub3 bandwidth 13.40Kb
- [ qid=4 ifname=tun0 ifbandwidth=33.60Kb ]
+ [ qid=4 ifname=tun1000000 ifbandwidth=33.60Kb ]
queue vier bandwidth 16.80Kb cbq( default )
- [ qid=4294967293 ifname=tun0 ifbandwidth=33.60Kb ]
+ [ qid=4294967293 ifname=tun1000000 ifbandwidth=33.60Kb ]
queue fuenf bandwidth 16.80Kb {subseven}
- [ qid=6 ifname=tun0 ifbandwidth=33.60Kb ]
+ [ qid=6 ifname=tun1000000 ifbandwidth=33.60Kb ]
queue subseven bandwidth 15.12Kb
- [ qid=7 ifname=tun0 ifbandwidth=33.60Kb ]
+ [ qid=7 ifname=tun1000000 ifbandwidth=33.60Kb ]
# test two different named queues don't get the same qid on different interfaces
altq on lo0 tbrsize 1824 bandwidth 10Mb cbq queue { bloody germans }
-altq on tun0 tbrsize 1824 bandwidth 10Mb cbq queue { bloody toads }
+altq on tun1000000 tbrsize 1824 bandwidth 10Mb cbq queue { bloody toads }
queue bloody cbq(default) bandwidth 50%
queue germans bandwidth 50%
queue toads bandwidth 50%
[ qid=4294967293 ifname=lo0 ifbandwidth=10Mb ]
queue germans bandwidth 5Mb
[ qid=2 ifname=lo0 ifbandwidth=10Mb ]
-queue root_tun0 bandwidth 10Mb priority 0 cbq( wrr root ) {bloody, toads}
- [ qid=4294967294 ifname=tun0 ifbandwidth=10Mb ]
+queue root_tun1000000 bandwidth 10Mb priority 0 cbq( wrr root ) {bloody, toads}
+ [ qid=4294967294 ifname=tun1000000 ifbandwidth=10Mb ]
queue bloody bandwidth 5Mb cbq( default )
- [ qid=4294967293 ifname=tun0 ifbandwidth=10Mb ]
+ [ qid=4294967293 ifname=tun1000000 ifbandwidth=10Mb ]
queue toads bandwidth 5Mb
- [ qid=3 ifname=tun0 ifbandwidth=10Mb ]
+ [ qid=3 ifname=tun1000000 ifbandwidth=10Mb ]
altq on lo0 tbrsize 1824 bandwidth 10Mb priq queue eins
queue eins priority 2 priq(default)
-altq on tun0 tbrsize 1824 bandwidth 33600b priq queue zwei
+altq on tun1000000 tbrsize 1824 bandwidth 33600b priq queue zwei
queue zwei priority 2 priq(default)
queue eins priority 2 priq( default )
[ qid=2 ifname=lo0 ifbandwidth=10Mb ]
queue zwei priority 2 priq( default )
- [ qid=3 ifname=tun0 ifbandwidth=33.60Kb ]
+ [ qid=3 ifname=tun1000000 ifbandwidth=33.60Kb ]
# queuespec limited to interface(s)
-altq on { ppp0 ppp1 tun0 tun1 } priq bandwidth 10Mb queue { one two }
+altq on { ppp0 ppp1 tun1000000 tun1000001 } priq bandwidth 10Mb queue { one two }
queue one priority 1 priq(default)
queue two on ppp0 priority 15
-queue two on { ppp1 tun0 tun1 } priority 0
+queue two on { ppp1 tun1000000 tun1000001 } priority 0
queue one priq( default )
[ qid=2 ifname=ppp1 ifbandwidth=10Mb ]
queue one priq( default )
- [ qid=2 ifname=tun0 ifbandwidth=10Mb ]
+ [ qid=2 ifname=tun1000000 ifbandwidth=10Mb ]
queue one priq( default )
- [ qid=2 ifname=tun1 ifbandwidth=10Mb ]
+ [ qid=2 ifname=tun1000001 ifbandwidth=10Mb ]
queue two priority 15
[ qid=3 ifname=ppp0 ifbandwidth=10Mb ]
queue two priority 0
[ qid=3 ifname=ppp1 ifbandwidth=10Mb ]
queue two priority 0
- [ qid=3 ifname=tun0 ifbandwidth=10Mb ]
+ [ qid=3 ifname=tun1000000 ifbandwidth=10Mb ]
queue two priority 0
- [ qid=3 ifname=tun1 ifbandwidth=10Mb ]
+ [ qid=3 ifname=tun1000001 ifbandwidth=10Mb ]
# queuespec limited to interface(s): negation
-altq on { ppp0 ppp1 tun0 tun1 } priq bandwidth 10Mb queue { one two }
+altq on { ppp0 ppp1 tun1000000 tun1000001 } priq bandwidth 10Mb queue { one two }
queue one priority 1 priq(default)
queue two on ppp0 priority 15
queue two on ! ppp0 priority 0
queue one priq( default )
[ qid=2 ifname=ppp1 ifbandwidth=10Mb ]
queue one priq( default )
- [ qid=2 ifname=tun0 ifbandwidth=10Mb ]
+ [ qid=2 ifname=tun1000000 ifbandwidth=10Mb ]
queue one priq( default )
- [ qid=2 ifname=tun1 ifbandwidth=10Mb ]
+ [ qid=2 ifname=tun1000001 ifbandwidth=10Mb ]
queue two priority 15
[ qid=3 ifname=ppp0 ifbandwidth=10Mb ]
queue two priority 0
[ qid=3 ifname=ppp1 ifbandwidth=10Mb ]
queue two priority 0
- [ qid=3 ifname=tun0 ifbandwidth=10Mb ]
+ [ qid=3 ifname=tun1000000 ifbandwidth=10Mb ]
queue two priority 0
- [ qid=3 ifname=tun1 ifbandwidth=10Mb ]
+ [ qid=3 ifname=tun1000001 ifbandwidth=10Mb ]
-ifconfig lo1 inet 192.168.0.1 netmask 0xffffff00 delete -link1
+ifconfig lo1000010 inet 192.168.0.1 netmask 0xffffff00 delete -link1
+ifconfig lo1000010 destroy
-pass in from any to lo1
+pass in from any to lo1000010
-ifconfig lo1 inet 192.168.0.1 netmask 0xffffff00 link1
+ifconfig lo1000010 create
+ifconfig lo1000010 inet 192.168.0.1 netmask 0xffffff00 link1
-ifconfig lo1 mtu 33224
+ifconfig lo1000010 destroy
#test tbrsize calculation
-altq on lo1 bandwidth 10Mb cbq queue { openbsd rocks }
+altq on lo1000010 bandwidth 10Mb cbq queue { openbsd rocks }
queue openbsd cbq(default)
-altq on lo1 cbq bandwidth 10Mb tbrsize 6000 queue { openbsd rocks }
+altq on lo1000010 cbq bandwidth 10Mb tbrsize 6000 queue { openbsd rocks }
queue openbsd cbq( default )
-ifconfig lo1 mtu 1500
+ifconfig lo1000010 create
+ifconfig lo1000010 mtu 1500
-ifconfig lo1 mtu 33224
+ifconfig lo1000010 destroy
#test tbrsize calculation
-altq on lo1 bandwidth 10Mb cbq queue { openbsd rocks }
+altq on lo1000010 bandwidth 10Mb cbq queue { openbsd rocks }
queue openbsd cbq(default)
-altq on lo1 cbq bandwidth 10Mb tbrsize 32000 queue { openbsd rocks }
+altq on lo1000010 cbq bandwidth 10Mb tbrsize 32000 queue { openbsd rocks }
queue openbsd cbq( default )
-ifconfig lo1 mtu 8000
+ifconfig lo1000010 create
+ifconfig lo1000010 mtu 8000
\ No newline at end of file
-ifconfig lo1 inet 192.168.0.1 netmask 0xffffff00 delete
+ifconfig lo1000000 inet 192.168.0.1 netmask 0xffffff00 delete
-antispoof log quick for { lo0 lo1 } inet \
+antispoof log quick for { lo0 lo1000000 } inet \
label "antispoof:$if:$srcaddr:$dstaddr"
block drop in log quick on ! lo0 inet from 127.0.0.0/8 to any label "antispoof:lo0:127.0.0.0/8:any"
-block drop in log quick on ! lo1 inet from 192.168.0.0/24 to any label "antispoof:lo1:192.168.0.0/24:any"
+block drop in log quick on ! lo1000000 inet from 192.168.0.0/24 to any label "antispoof:lo1000000:192.168.0.0/24:any"
-ifconfig lo1 inet 192.168.0.1 netmask 0xffffff00
+ifconfig lo1000000 inet 192.168.0.1 netmask 0xffffff00
projects / openbsd / commitdiff