Page MenuHomeFreeBSD
Differential D46578

pf tests: test the new received-on feature
ClosedPublic
Actions

Authored by kp on Sat, Sep 7, 9:34 AM.
Tags
None
Referenced Files
Unknown Object (File)
Thu, Sep 19, 10:16 PM
Unknown Object (File)
Thu, Sep 19, 1:44 PM
Unknown Object (File)
Tue, Sep 17, 4:48 AM
Unknown Object (File)
Mon, Sep 16, 6:22 PM
Unknown Object (File)
Mon, Sep 16, 4:27 PM
Unknown Object (File)
Mon, Sep 16, 10:50 AM
Unknown Object (File)
Thu, Sep 12, 1:55 AM
Unknown Object (File)
Thu, Sep 12, 1:23 AM
View All 16 Files
Subscribers
farrokhi
glebius
imp
melifaro
vegeta_tuxpowered.net
zlei

Details

Reviewers
zlei
Group Reviewers
network
pfsense
Commits
rG661d0031bbc6: pf tests: test the new received-on feature
Summary

Sponsored by: Rubicon Communications, LLC ("Netgate")

Diff Detail

Repository
rG FreeBSD src repository
Lint
Lint Not Applicable
Unit
Tests Not Applicable

Event Timeline

kp created this revision.Sat, Sep 7, 9:34 AM
Herald added subscribers: vegeta_tuxpowered.net, glebius, melifaro and 2 others. · View Herald TranscriptSat, Sep 7, 9:34 AM
Harbormaster completed remote builds in B59366: Diff 143074.Sat, Sep 7, 9:34 AM
kp requested review of this revision.Sat, Sep 7, 9:34 AM
kp added a parent revision: D46577: pf: allow filtering on the receive interface.
kp added a child revision: D46579: pf.conf.5: document received-on.
zlei accepted this revision as: zlei.Sat, Sep 14, 7:41 AM
zlei added a subscriber: zlei.

The test code looks good to me.

sbin/pfctl/tests/files/pf1022.ok
2

What purpose do those two files pf1022.in and pf1022.ok serve ?

This revision is now accepted and ready to land.Sat, Sep 14, 7:41 AM
zlei added a comment.Sat, Sep 14, 7:44 AM

The document says received-on can work on interface group. Shall we add additional tests for that case ?

kp added a comment.Mon, Sep 16, 9:46 AM
In D46578#1063694, @zlei wrote:

The document says received-on can work on interface group. Shall we add additional tests for that case ?

That is an excellent idea. I'll add a test case.
It should just work, because we use pf_match_rcvif() to do the matching, but tests are good anyway.

sbin/pfctl/tests/files/pf1022.ok
2

They're part of the pfctl parser tests. We feed the .in file to it, and check that it produces the expected output. Basically making sure it can parse things the way we expect them to be parsed.

kp updated this revision to Diff 143380.Mon, Sep 16, 10:07 AM

Also test received-on <group>

This revision now requires review to proceed.Mon, Sep 16, 10:07 AM
Harbormaster completed remote builds in B59503: Diff 143380.Mon, Sep 16, 10:07 AM
This revision was not accepted when it landed; it landed in state Needs Review.Mon, Sep 16, 1:06 PM
Closed by commit rG661d0031bbc6: pf tests: test the new received-on feature (authored by kp). · Explain Why
This revision was automatically updated to reflect the committed changes.
kp added a commit: rG661d0031bbc6: pf tests: test the new received-on feature.

Revision Contents
Changeset List

PathSize
sbin/
pfctl/
tests/
files/
1 line
1 line
1 line
tests/
sys/
netpfil/
pf/
82 lines

Diff 143387

View Options

sbin/pfctl/tests/files/pf1022.in

Loading...
View Options

sbin/pfctl/tests/files/pf1022.ok

Loading...
View Options

sbin/pfctl/tests/pfctl_test_list.inc

Loading...
View Options

tests/sys/netpfil/pf/pass_block.sh

Loading...