KekenoBSD/src
3
0
Fork 0
Code Issues Pull Requests Actions 1 Packages Projects Releases Wiki Activity

pfctl tests: basic source and state limiter tests

Browse Source 
Sponsored by:	Rubicon Communications, LLC ("Netgate")
This commit is contained in:
Kristof Provost
2026-01-07 16:20:21 +01:00
parent 398ca30cb6
commit 445a3c86e6
5 changed files with 10 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
sbin/pfctl/tests/files/pf1076.in
+2
View File
@@ -0,0 +1,2 @@
state limiter "dns-server" id 1 limit 1000 rate 1/10
pass in proto tcp to port domain state limiter "dns-server"
sbin/pfctl/tests/files/pf1076.ok
+2
View File
@@ -0,0 +1,2 @@
state limiter dns-server id 1 limit 1000 rate 1/10
pass in proto tcp from any to any port = domain flags S/SA keep state state limiter id 1
sbin/pfctl/tests/files/pf1077.in
+2
View File
@@ -0,0 +1,2 @@
source limiter "dns-server" id 1 entries 2 limit 3 rate 4/5 inet mask 16
pass in proto tcp to port domain source limiter "dns-server"
sbin/pfctl/tests/files/pf1077.ok
+2
View File
@@ -0,0 +1,2 @@
source limiter dns-server id 1 limit 2 states 3 rate 4/5 inet mask 16
pass in proto tcp from any to any port = domain flags S/SA keep state source limiter id 1
sbin/pfctl/tests/pfctl_test_list.inc
+2
View File
@@ -184,3 +184,5 @@ PFCTL_TEST_FAIL(1072, "Invalid port range")
PFCTL_TEST(1073, "Filter AF different than route-to AF, with prefer-ipv6-nexthop")
PFCTL_TEST_FAIL(1074, "Filter AF different than route-to AF, without prefer-ipv6-nexthop")
PFCTL_TEST(1075, "One shot rule")
PFCTL_TEST(1076, "State limiter")
PFCTL_TEST(1077, "Source limiter")