Page MenuHomeFreeBSD
Feed Advanced Search

Mar 12 2023

vegeta_tuxpowered.net added inline comments to D38025: Backport OpenBSD syntax of "scrub" option for "match" and "pass" rules.
Mar 12 2023, 4:18 PM
vegeta_tuxpowered.net updated the diff for D38025: Backport OpenBSD syntax of "scrub" option for "match" and "pass" rules.

Address issues raised in some of comments.

Mar 12 2023, 4:05 PM

Mar 10 2023

vegeta_tuxpowered.net abandoned D38428: netstat: pfsync stats spelling.
Mar 10 2023, 10:12 PM

Mar 5 2023

vegeta_tuxpowered.net retitled D38025: Backport OpenBSD syntax of "scrub" option for "match" and "pass" rules from Add "match" rules like in upstream pf to Backport OpenBSD syntax of "scrub" option for "match" and "pass" rules.
Mar 5 2023, 10:22 PM
vegeta_tuxpowered.net updated the diff for D38025: Backport OpenBSD syntax of "scrub" option for "match" and "pass" rules.

Update the diff with context.

Mar 5 2023, 10:22 PM
vegeta_tuxpowered.net requested review of D38918: pfctl: Fix superblock printf format mismatch.
Mar 5 2023, 8:37 PM

Mar 2 2023

vegeta_tuxpowered.net updated the diff for D38126: netpfil tests: Add functions for testing routing scenarios.

Fixed spelling, indentation and the expected test exit code argument.

Mar 2 2023, 10:20 PM

Feb 7 2023

vegeta_tuxpowered.net requested review of D38428: netstat: pfsync stats spelling.
Feb 7 2023, 9:53 PM

Jan 30 2023

vegeta_tuxpowered.net added a comment to D38126: netpfil tests: Add functions for testing routing scenarios.
In D38126#869129, @kp wrote:

I'm certainly seeing the argument for having setup_router_dummy_ipv6 and friends do the test setup.

Jan 30 2023, 8:43 AM
vegeta_tuxpowered.net updated the diff for D38126: netpfil tests: Add functions for testing routing scenarios.

Re-add the missing part: the setup functions.

Jan 30 2023, 8:43 AM

Jan 26 2023

vegeta_tuxpowered.net updated the diff for D38126: netpfil tests: Add functions for testing routing scenarios.

I have updated the review to not only add functions for creating routing-based tests but also to make use of them by adding more tests for standard pf.conf syntax. This makes this review not related anymore to D38025.

Jan 26 2023, 10:02 PM

Jan 22 2023

vegeta_tuxpowered.net added a comment to D38126: netpfil tests: Add functions for testing routing scenarios.

! In D38126#866510, @kp wrote:

! In D38126#866296, @vegeta_tuxpowered.net wrote:

Jan 22 2023, 11:27 AM

Jan 20 2023

vegeta_tuxpowered.net added a comment to D38126: netpfil tests: Add functions for testing routing scenarios.
In D38126#866273, @kp wrote:

There's certainly a lot of repetition in many of the pf (and other firewall) tests.

So far I've chosen to not do anything about that, because it makes each individual test case much easier to understand. Each test case fully describes the setup it operates in, and when someone tries to debug it (or understand it for any other reason) there's no need to go look at other files to work out what the setup actually is.

Jan 20 2023, 11:58 AM
vegeta_tuxpowered.net added a comment to D38122: netpfil tests: Improve pft_ping.py.
In D38122#866272, @kp wrote:

This seems mostly good, but I've had to add these changes to avoid a few test failures:

Jan 20 2023, 11:39 AM
vegeta_tuxpowered.net updated the diff for D38122: netpfil tests: Improve pft_ping.py.

Split sniffer.correctPackets change into D38120.

Jan 20 2023, 11:06 AM
vegeta_tuxpowered.net added a comment to D38120: netpfil tests: Improve sniffer.py.
In D38120#866233, @kp wrote:

I think we're missing a change of foundCorrectPacket to correctPackets in pft_ping.py here.

Jan 20 2023, 11:01 AM
vegeta_tuxpowered.net updated the diff for D38120: netpfil tests: Improve sniffer.py.
Jan 20 2023, 10:59 AM
vegeta_tuxpowered.net updated the summary of D38122: netpfil tests: Improve pft_ping.py.
Jan 20 2023, 10:38 AM
vegeta_tuxpowered.net updated the summary of D38129: netpfil tests: Add tests for the new scrub syntax.
Jan 20 2023, 10:24 AM
vegeta_tuxpowered.net updated the summary of D38126: netpfil tests: Add functions for testing routing scenarios.
Jan 20 2023, 10:23 AM
vegeta_tuxpowered.net updated the summary of D38123: netpfil tests: Improve pfsync_defer.py .
Jan 20 2023, 10:23 AM
vegeta_tuxpowered.net updated the summary of D38122: netpfil tests: Improve pft_ping.py.
Jan 20 2023, 10:23 AM
vegeta_tuxpowered.net updated the summary of D38120: netpfil tests: Improve sniffer.py.
Jan 20 2023, 10:23 AM

Jan 19 2023

vegeta_tuxpowered.net updated the summary of D38129: netpfil tests: Add tests for the new scrub syntax.
Jan 19 2023, 11:02 PM
vegeta_tuxpowered.net requested review of D38129: netpfil tests: Add tests for the new scrub syntax.
Jan 19 2023, 11:00 PM
vegeta_tuxpowered.net requested review of D38126: netpfil tests: Add functions for testing routing scenarios.
Jan 19 2023, 10:37 PM
vegeta_tuxpowered.net added a reviewer for D38123: netpfil tests: Improve pfsync_defer.py : kp.
Jan 19 2023, 5:55 PM
vegeta_tuxpowered.net requested review of D38123: netpfil tests: Improve pfsync_defer.py .
Jan 19 2023, 5:55 PM
vegeta_tuxpowered.net updated the diff for D38122: netpfil tests: Improve pft_ping.py.
Jan 19 2023, 5:52 PM
vegeta_tuxpowered.net requested review of D38122: netpfil tests: Improve pft_ping.py.
Jan 19 2023, 5:51 PM
vegeta_tuxpowered.net updated the summary of D38120: netpfil tests: Improve sniffer.py.
Jan 19 2023, 4:58 PM
vegeta_tuxpowered.net requested review of D38120: netpfil tests: Improve sniffer.py.
Jan 19 2023, 4:56 PM
vegeta_tuxpowered.net updated the diff for D38025: Backport OpenBSD syntax of "scrub" option for "match" and "pass" rules.
Jan 19 2023, 4:01 PM

Jan 13 2023

vegeta_tuxpowered.net updated the summary of D38024: Properly destroy renamed interfaces.
Jan 13 2023, 7:28 PM
vegeta_tuxpowered.net updated the summary of D38024: Properly destroy renamed interfaces.
Jan 13 2023, 7:28 PM
vegeta_tuxpowered.net updated the diff for D38024: Properly destroy renamed interfaces.
Jan 13 2023, 7:25 PM
vegeta_tuxpowered.net added a comment to D38024: Properly destroy renamed interfaces.
In D38024#863922, @kp wrote:

I'm a little concerned about one end of an epair not getting destroyed if we destroy the other. That's not something I'd want the tests to cope with, that sounds like an issue with if_epair we should look at.

Jan 13 2023, 4:26 PM

Jan 12 2023

vegeta_tuxpowered.net added a comment to D38025: Backport OpenBSD syntax of "scrub" option for "match" and "pass" rules.

! In D38025#863920, @kp wrote:
Is this against a recent main? Because that has a (much more basic) "match" implementation already.

Jan 12 2023, 12:52 PM
vegeta_tuxpowered.net updated the summary of D38025: Backport OpenBSD syntax of "scrub" option for "match" and "pass" rules.
Jan 12 2023, 11:50 AM
vegeta_tuxpowered.net updated the summary of D38024: Properly destroy renamed interfaces.
Jan 12 2023, 10:17 AM

Jan 11 2023

vegeta_tuxpowered.net updated the summary of D38025: Backport OpenBSD syntax of "scrub" option for "match" and "pass" rules.
Jan 11 2023, 10:32 PM
vegeta_tuxpowered.net requested review of D38025: Backport OpenBSD syntax of "scrub" option for "match" and "pass" rules.
Jan 11 2023, 9:04 PM
vegeta_tuxpowered.net requested review of D38024: Properly destroy renamed interfaces.
Jan 11 2023, 8:52 PM

Dec 5 2022

vegeta_tuxpowered.net requested review of D37601: Mark imported state as PFTM_UNLINKED before freeing it.
Dec 5 2022, 4:16 PM