Module Name: src
Committed By: rmind
Date: Mon Sep 23 15:30:32 UTC 2013
Modified Files:
src/usr.sbin/npf/npftest: npftest.conf
Log Message:
Update npftest.conf for the recent syntax adjustments.
To generate a diff of this commit:
cvs rdiff -u -r1.2 -r1.3 src/usr.sbin/npf/npftest/npftest.conf
Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.
Modified files:
Index: src/usr.sbin/npf/npftest/npftest.conf
diff -u src/usr.sbin/npf/npftest/npftest.conf:1.2 src/usr.sbin/npf/npftest/npftest.conf:1.3
--- src/usr.sbin/npf/npftest/npftest.conf:1.2 Sat Feb 9 03:35:33 2013
+++ src/usr.sbin/npf/npftest/npftest.conf Mon Sep 23 15:30:32 2013
@@ -1,4 +1,4 @@
-# $NetBSD: npftest.conf,v 1.2 2013/02/09 03:35:33 rmind Exp $
+# $NetBSD: npftest.conf,v 1.3 2013/09/23 15:30:32 rmind Exp $
$ext_if = "npftest0"
$int_if = "npftest1"
@@ -22,7 +22,7 @@ map $ext_if dynamic $local_ip2 <-> $pub_
map $ext_if dynamic $local_net -> $pub_ip1
map $ext_if dynamic $local_ip1 port 6000 <- $pub_ip1 port 8000
-group (interface $ext_if) {
+group "ext" on $ext_if {
pass stateful out final proto tcp flags S/SA all
pass stateful out final from $local_net
pass stateful in final to any port $ports
@@ -30,13 +30,13 @@ group (interface $ext_if) {
block all
}
-group (interface $int_if) {
- ruleset (name "test-rules", dynamic)
+group "int" on $int_if {
+ ruleset "test-rules"
pass stateful out final to $local_ip2
pass out final to $local_ip3
block final to $local_ip4
}
-group (default) {
+group default {
block all
}
