Module Name: src Committed By: rmind Date: Mon Sep 23 15:30:32 UTC 2013
Modified Files: src/usr.sbin/npf/npftest: npftest.conf Log Message: Update npftest.conf for the recent syntax adjustments. To generate a diff of this commit: cvs rdiff -u -r1.2 -r1.3 src/usr.sbin/npf/npftest/npftest.conf Please note that diffs are not public domain; they are subject to the copyright notices on the relevant files.
Modified files: Index: src/usr.sbin/npf/npftest/npftest.conf diff -u src/usr.sbin/npf/npftest/npftest.conf:1.2 src/usr.sbin/npf/npftest/npftest.conf:1.3 --- src/usr.sbin/npf/npftest/npftest.conf:1.2 Sat Feb 9 03:35:33 2013 +++ src/usr.sbin/npf/npftest/npftest.conf Mon Sep 23 15:30:32 2013 @@ -1,4 +1,4 @@ -# $NetBSD: npftest.conf,v 1.2 2013/02/09 03:35:33 rmind Exp $ +# $NetBSD: npftest.conf,v 1.3 2013/09/23 15:30:32 rmind Exp $ $ext_if = "npftest0" $int_if = "npftest1" @@ -22,7 +22,7 @@ map $ext_if dynamic $local_ip2 <-> $pub_ map $ext_if dynamic $local_net -> $pub_ip1 map $ext_if dynamic $local_ip1 port 6000 <- $pub_ip1 port 8000 -group (interface $ext_if) { +group "ext" on $ext_if { pass stateful out final proto tcp flags S/SA all pass stateful out final from $local_net pass stateful in final to any port $ports @@ -30,13 +30,13 @@ group (interface $ext_if) { block all } -group (interface $int_if) { - ruleset (name "test-rules", dynamic) +group "int" on $int_if { + ruleset "test-rules" pass stateful out final to $local_ip2 pass out final to $local_ip3 block final to $local_ip4 } -group (default) { +group default { block all }