diff options
| author | darrenr <darrenr@FreeBSD.org> | 2008-07-24 12:35:05 +0000 |
|---|---|---|
| committer | darrenr <darrenr@FreeBSD.org> | 2008-07-24 12:35:05 +0000 |
| commit | 49ad2adb91673def2dfa0f293612e2de5e3a29af (patch) | |
| tree | fbe3003abde766264fafdbbd7e484eafc5be4ad5 /contrib/ipfilter/test | |
| parent | 308672b0059651d854c35e673c94d0f76d84c25f (diff) | |
| download | FreeBSD-src-49ad2adb91673def2dfa0f293612e2de5e3a29af.zip FreeBSD-src-49ad2adb91673def2dfa0f293612e2de5e3a29af.tar.gz | |
2020447 IPFilter's NAT can undo name server random port selection
Approved by: darrenr
MFC after: 1 week
Security: CERT VU#521769
Diffstat (limited to 'contrib/ipfilter/test')
| -rw-r--r-- | contrib/ipfilter/test/regress/n12 | 2 | ||||
| -rw-r--r-- | contrib/ipfilter/test/regress/n2 | 8 | ||||
| -rw-r--r-- | contrib/ipfilter/test/regress/n5 | 6 | ||||
| -rw-r--r-- | contrib/ipfilter/test/regress/ni1.nat | 4 | ||||
| -rw-r--r-- | contrib/ipfilter/test/regress/ni2.nat | 2 | ||||
| -rw-r--r-- | contrib/ipfilter/test/regress/ni4.nat | 2 |
6 files changed, 12 insertions, 12 deletions
diff --git a/contrib/ipfilter/test/regress/n12 b/contrib/ipfilter/test/regress/n12 index 225675b..933856b 100644 --- a/contrib/ipfilter/test/regress/n12 +++ b/contrib/ipfilter/test/regress/n12 @@ -1 +1 @@ -map le0 192.168.126.0/24 -> 0/32 portmap tcp/udp 10000:20000 +map le0 192.168.126.0/24 -> 0/32 portmap tcp/udp 10000:20000 sequential diff --git a/contrib/ipfilter/test/regress/n2 b/contrib/ipfilter/test/regress/n2 index dbce5aa..39a4d72 100644 --- a/contrib/ipfilter/test/regress/n2 +++ b/contrib/ipfilter/test/regress/n2 @@ -1,4 +1,4 @@ -map zx0 10.1.1.1/32 -> 10.2.2.2/32 portmap tcp 10000:20000 -map zx0 10.1.1.0/24 -> 10.3.4.5/32 portmap udp 10000:20000 -map zx0 10.1.0.0/16 -> 10.3.4.0/24 portmap tcp/udp 10000:20000 -map zx0 10.1.1.0/24 -> 10.3.4.5/32 portmap tcp/udp 40000:40001 +map zx0 10.1.1.1/32 -> 10.2.2.2/32 portmap tcp 10000:20000 sequential +map zx0 10.1.1.0/24 -> 10.3.4.5/32 portmap udp 10000:20000 sequential +map zx0 10.1.0.0/16 -> 10.3.4.0/24 portmap tcp/udp 10000:20000 sequential +map zx0 10.1.1.0/24 -> 10.3.4.5/32 portmap tcp/udp 40000:40001 sequential diff --git a/contrib/ipfilter/test/regress/n5 b/contrib/ipfilter/test/regress/n5 index e55cea0..d9f1a88 100644 --- a/contrib/ipfilter/test/regress/n5 +++ b/contrib/ipfilter/test/regress/n5 @@ -1,6 +1,6 @@ map zx0 10.1.1.1/32 -> 10.2.2.2/32 map zx0 from 10.1.1.0/24 to 10.1.0.0/16 -> 10.3.4.5/32 map zx0 from 10.1.1.0/24 ! to 10.1.0.0/16 -> 10.3.4.0/24 -map zx0 10.1.1.0/24 -> 10.3.4.5/32 portmap udp 10000:20000 -map zx0 10.1.0.0/16 -> 10.3.4.0/24 portmap tcp/udp 10000:20000 -map zx0 10.1.1.0/24 -> 10.3.4.5/32 portmap tcp/udp 40000:40001 +map zx0 10.1.1.0/24 -> 10.3.4.5/32 portmap udp 10000:20000 sequential +map zx0 10.1.0.0/16 -> 10.3.4.0/24 portmap tcp/udp 10000:20000 sequential +map zx0 10.1.1.0/24 -> 10.3.4.5/32 portmap tcp/udp 40000:40001 sequential diff --git a/contrib/ipfilter/test/regress/ni1.nat b/contrib/ipfilter/test/regress/ni1.nat index f38e435..077aab1 100644 --- a/contrib/ipfilter/test/regress/ni1.nat +++ b/contrib/ipfilter/test/regress/ni1.nat @@ -1,3 +1,3 @@ -map df0 from 2.2.2.2/32 port 20000 >< 25000 to any -> 6.6.6.8/32 portmap udp 2000:2500 -map df0 from 2.2.2.2/32 port 2000 >< 2500 to any -> 6.6.6.7/32 portmap udp 20000:25000 +map df0 from 2.2.2.2/32 port 20000 >< 25000 to any -> 6.6.6.8/32 portmap udp 2000:2500 sequential +map df0 from 2.2.2.2/32 port 2000 >< 2500 to any -> 6.6.6.7/32 portmap udp 20000:25000 sequential map df0 from 2.2.2.2/32 to any -> 6.6.6.6/32 diff --git a/contrib/ipfilter/test/regress/ni2.nat b/contrib/ipfilter/test/regress/ni2.nat index 4ad73c2..43d2c83 100644 --- a/contrib/ipfilter/test/regress/ni2.nat +++ b/contrib/ipfilter/test/regress/ni2.nat @@ -1 +1 @@ -map xl0 10.0.0.0/8 -> 1.1.1.1/32 portmap tcp/udp 40000:60000 +map xl0 10.0.0.0/8 -> 1.1.1.1/32 portmap tcp/udp 40000:60000 sequential diff --git a/contrib/ipfilter/test/regress/ni4.nat b/contrib/ipfilter/test/regress/ni4.nat index 6eefdc2..e9d5cc1 100644 --- a/contrib/ipfilter/test/regress/ni4.nat +++ b/contrib/ipfilter/test/regress/ni4.nat @@ -1 +1 @@ -map df0 2.2.2.2/32 -> 6.6.6.6/32 portmap tcp/udp 40000:60000 +map df0 2.2.2.2/32 -> 6.6.6.6/32 portmap tcp/udp 40000:60000 sequential |
