git: 4a6b92849e61 - main - pf: Fix tests broken by enabling inet-local filtering
- Go to: [ bottom of page ] [ top of archives ] [ this month ]
Date: Sat, 03 Jun 2023 10:09:07 UTC
The branch main has been updated by dfr:
URL: https://cgit.FreeBSD.org/src/commit/?id=4a6b92849e619c40ca9a78d38339798f2735ec56
commit 4a6b92849e619c40ca9a78d38339798f2735ec56
Author: Doug Rabson <dfr@FreeBSD.org>
AuthorDate: 2023-06-02 15:58:33 +0000
Commit: Doug Rabson <dfr@FreeBSD.org>
CommitDate: 2023-06-03 10:07:56 +0000
pf: Fix tests broken by enabling inet-local filtering
Summary:
Three of the pf dummynet tests were using filter rules which matched
both the intended epair interface as well as lo0 which now receives
PFIL_OUT events for messages delivered to the local network stack (if
enabled). This commit changes the rules to match only for the expected
epair interface.
PR: 268717
Reviewed-by: kp
MFC-after: 2 weeks
Differential Revision: https://reviews.freebsd.org/D40393
---
tests/sys/netpfil/common/dummynet.sh | 6 +++---
1 file changed, 3 insertions(+), 3 deletions(-)
diff --git a/tests/sys/netpfil/common/dummynet.sh b/tests/sys/netpfil/common/dummynet.sh
index c3d0588045c8..6f7981a043a8 100644
--- a/tests/sys/netpfil/common/dummynet.sh
+++ b/tests/sys/netpfil/common/dummynet.sh
@@ -55,7 +55,7 @@ interface_removal_body()
"ipfw" \
"ipfw add 1000 pipe 1 ip from any to any" \
"pf" \
- "pass dnpipe 1"
+ "pass on ${epair}b dnpipe 1"
# single ping succeeds just fine
atf_check -s exit:0 -o ignore ping -c 1 192.0.2.2
@@ -102,7 +102,7 @@ pipe_body()
"ipfw" \
"ipfw add 1000 pipe 1 ip from any to any" \
"pf" \
- "pass dnpipe 1"
+ "pass on ${epair}b dnpipe 1"
# single ping succeeds just fine
atf_check -s exit:0 -o ignore ping -c 1 192.0.2.2
@@ -146,7 +146,7 @@ pipe_v6_body()
"ipfw" \
"ipfw add 1000 pipe 1 ip6 from any to any" \
"pf" \
- "pass dnpipe 1"
+ "pass on ${epair}b dnpipe 1"
# Single ping succeeds
atf_check -s exit:0 -o ignore ping6 -c 1 2001:db8:42::2