From d789980a7d786ea671ab44453318d8363dd56c38 Mon Sep 17 00:00:00 2001 From: dlg Date: Thu, 4 Feb 2021 21:20:24 +0000 Subject: [PATCH] route-to rules take an ip now, not an interface with optional ip. they now also only work on keep state rules, so there's even more errors from the parser to expect. reminded by bluhm@ --- regress/sbin/pfctl/pfail8.in | 4 ++-- regress/sbin/pfctl/pfail8.ok | 2 ++ 2 files changed, 4 insertions(+), 2 deletions(-) diff --git a/regress/sbin/pfctl/pfail8.in b/regress/sbin/pfctl/pfail8.in index 09a0bee2fba..cd07dbf2891 100644 --- a/regress/sbin/pfctl/pfail8.in +++ b/regress/sbin/pfctl/pfail8.in @@ -1,3 +1,3 @@ -block in quick on tun1000000 from any to 192.168.1.0/24 dup-to (tun1000001 fec0::1) -block in quick on tun1000000 from any to fec0::1/128 dup-to (tun1000001 192.168.1.1) +block in quick on tun1000000 from any to 192.168.1.0/24 dup-to fec0::1 +block in quick on tun1000000 from any to fec0::1/128 dup-to 192.168.1.1 diff --git a/regress/sbin/pfctl/pfail8.ok b/regress/sbin/pfctl/pfail8.ok index a5e63a17ee7..fd5eab699b5 100644 --- a/regress/sbin/pfctl/pfail8.ok +++ b/regress/sbin/pfctl/pfail8.ok @@ -1,8 +1,10 @@ stdin:1: af mismatch in routing spec +stdin:1: route-to, reply-to and dup-to require keep state stdin:1: route-to, reply-to and dup-to are not supported on block rules stdin:1: skipping rule due to errors stdin:1: rule expands to no valid combination stdin:2: af mismatch in routing spec +stdin:2: route-to, reply-to and dup-to require keep state stdin:2: route-to, reply-to and dup-to are not supported on block rules stdin:2: skipping rule due to errors stdin:2: rule expands to no valid combination -- 2.20.1