From nobody Wed Jan 14 08:06:03 2026 X-Original-To: dev-commits-src-all@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4drdwX2h8zz6PLCK for ; Wed, 14 Jan 2026 08:06:04 +0000 (UTC) (envelope-from git@FreeBSD.org) Received: from mxrelay.nyi.freebsd.org (mxrelay.nyi.freebsd.org [IPv6:2610:1c1:1:606c::19:3]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "mxrelay.nyi.freebsd.org", Issuer "R13" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4drdwX0lXNz3KF1 for ; Wed, 14 Jan 2026 08:06:04 +0000 (UTC) (envelope-from git@FreeBSD.org) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1768377964; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding; bh=mulpsO0OamK1CHKBI69zPm9RiRUblpia5Fsh16G4pIc=; b=jUnCa5jNIHAvs40wCsKKEq3Z64PeCrjs39ShfNXwopjuCwPuvjVxqb4BKxuKcjKvAnQ2Po Td3uimTmA05KYKpOv0W7nWjHxgnIoKAW7h3nDoCA8KpjtIO9viikkM6aNRC9MjApRkViVz fjpmYjqwW4hnqwcaOwg8NoL2mcAAvTzt2Thx/jL9gs2cfjuVrR69ohuSX6KrNDJ2tld1u7 fsP35IrJvK10zkAVuHgmx586ynB705AgQX3E8YWn9BDZqxwajIjd+2bzIil9edEjtddU4Y WSq53+aD6k4T2AZ2gldqtVERAsyZjU20LLwXYMgv5qWyDvwWB3HiTLvH2NctOw== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1768377964; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding; bh=mulpsO0OamK1CHKBI69zPm9RiRUblpia5Fsh16G4pIc=; b=o0QkzQJ+FkYdLhQAYVDH29nOhaIjpmCr1rXKWKEWlkWU5hZT+lKhXUO+zE/l4G+IRenyqV 1ND9IE1GbJ29ShrszNEoNHJRSdtfSU/CyOrscxHB1JXSsihv0bqN38iXLoCDGHRvhiQlCw yY/w/92Qi5VFK9F2xZp3eWuY+1EmfB0IGxbXpL4/fFwROc8du6Qo9stHSB/Ig57hlsieX6 i2RFk9YxEjrjvw79thdkUH88OSE5QF6qp1ILQOJ4dy07t0fhpPYSHntmYAyxU7VIQYOXcY FbT4F0eY7GJ/N7soH2+5IBxThndPCGOTTj333G7WhfoWGwrSNSk/WIl4EQlTJQ== ARC-Seal: i=1; s=dkim; d=freebsd.org; t=1768377964; a=rsa-sha256; cv=none; b=j3meVx12Ir2zJUl6ErCPxxJiiPlHGjNuantbPIT4kJ16wTJmp11iXnEEOlcmnqg22Oh1R7 w1h8Zqdt3f0lgPpn51MxaHlXneRd4fpTmqguU4v1b33cCsb8h0tqa2z2pFwHe+5LTfQOol M5AyStTU6nOblT0tmfx+exaT5f/MtajyUcbaKOaK2ed1SrZ+gT1nETW1SmaNDYghp3CiHq G/yXQsP2PsrseD1av8oQVR2Oqa8L5etMjiz0/GNUlLEjYGQIr2GIlpt5WLxaskZZBZ+Odk 41TvmksugFP7RHg5jRuvMobDAUPeq6dQrRyuNjLKSe5jv0dtd5/gq7515yub1A== ARC-Authentication-Results: i=1; mx1.freebsd.org; none Received: from gitrepo.freebsd.org (gitrepo.freebsd.org [IPv6:2610:1c1:1:6068::e6a:5]) by mxrelay.nyi.freebsd.org (Postfix) with ESMTP id 4drdwW6ZKpzq59 for ; Wed, 14 Jan 2026 08:06:03 +0000 (UTC) (envelope-from git@FreeBSD.org) Received: from git (uid 1279) (envelope-from git@FreeBSD.org) id b6bb by gitrepo.freebsd.org (DragonFly Mail Agent v0.13+ on gitrepo.freebsd.org); Wed, 14 Jan 2026 08:06:03 +0000 To: src-committers@FreeBSD.org, dev-commits-src-all@FreeBSD.org, dev-commits-src-main@FreeBSD.org From: Kristof Provost Subject: git: 445a3c86e674 - main - pfctl tests: basic source and state limiter tests List-Id: Commit messages for all branches of the src repository List-Archive: https://lists.freebsd.org/archives/dev-commits-src-all List-Help: List-Post: List-Subscribe: List-Unsubscribe: X-BeenThere: dev-commits-src-all@freebsd.org Sender: owner-dev-commits-src-all@FreeBSD.org MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 8bit X-Git-Committer: kp X-Git-Repository: src X-Git-Refname: refs/heads/main X-Git-Reftype: branch X-Git-Commit: 445a3c86e674800f70fce6d8f2038f09deee37cf Auto-Submitted: auto-generated Date: Wed, 14 Jan 2026 08:06:03 +0000 Message-Id: <69674e6b.b6bb.76b1b98b@gitrepo.freebsd.org> The branch main has been updated by kp: URL: https://cgit.FreeBSD.org/src/commit/?id=445a3c86e674800f70fce6d8f2038f09deee37cf commit 445a3c86e674800f70fce6d8f2038f09deee37cf Author: Kristof Provost AuthorDate: 2026-01-07 15:20:21 +0000 Commit: Kristof Provost CommitDate: 2026-01-14 06:44:40 +0000 pfctl tests: basic source and state limiter tests Sponsored by: Rubicon Communications, LLC ("Netgate") --- sbin/pfctl/tests/files/pf1076.in | 2 ++ sbin/pfctl/tests/files/pf1076.ok | 2 ++ sbin/pfctl/tests/files/pf1077.in | 2 ++ sbin/pfctl/tests/files/pf1077.ok | 2 ++ sbin/pfctl/tests/pfctl_test_list.inc | 2 ++ 5 files changed, 10 insertions(+) diff --git a/sbin/pfctl/tests/files/pf1076.in b/sbin/pfctl/tests/files/pf1076.in new file mode 100644 index 000000000000..af815fd4c5ef --- /dev/null +++ b/sbin/pfctl/tests/files/pf1076.in @@ -0,0 +1,2 @@ +state limiter "dns-server" id 1 limit 1000 rate 1/10 +pass in proto tcp to port domain state limiter "dns-server" diff --git a/sbin/pfctl/tests/files/pf1076.ok b/sbin/pfctl/tests/files/pf1076.ok new file mode 100644 index 000000000000..def9533b1e60 --- /dev/null +++ b/sbin/pfctl/tests/files/pf1076.ok @@ -0,0 +1,2 @@ +state limiter dns-server id 1 limit 1000 rate 1/10 +pass in proto tcp from any to any port = domain flags S/SA keep state state limiter id 1 diff --git a/sbin/pfctl/tests/files/pf1077.in b/sbin/pfctl/tests/files/pf1077.in new file mode 100644 index 000000000000..9394624622d8 --- /dev/null +++ b/sbin/pfctl/tests/files/pf1077.in @@ -0,0 +1,2 @@ +source limiter "dns-server" id 1 entries 2 limit 3 rate 4/5 inet mask 16 +pass in proto tcp to port domain source limiter "dns-server" diff --git a/sbin/pfctl/tests/files/pf1077.ok b/sbin/pfctl/tests/files/pf1077.ok new file mode 100644 index 000000000000..e52afb6bff9c --- /dev/null +++ b/sbin/pfctl/tests/files/pf1077.ok @@ -0,0 +1,2 @@ +source limiter dns-server id 1 limit 2 states 3 rate 4/5 inet mask 16 +pass in proto tcp from any to any port = domain flags S/SA keep state source limiter id 1 diff --git a/sbin/pfctl/tests/pfctl_test_list.inc b/sbin/pfctl/tests/pfctl_test_list.inc index 9dd4a590ad8f..a7328a860dda 100644 --- a/sbin/pfctl/tests/pfctl_test_list.inc +++ b/sbin/pfctl/tests/pfctl_test_list.inc @@ -184,3 +184,5 @@ PFCTL_TEST_FAIL(1072, "Invalid port range") PFCTL_TEST(1073, "Filter AF different than route-to AF, with prefer-ipv6-nexthop") PFCTL_TEST_FAIL(1074, "Filter AF different than route-to AF, without prefer-ipv6-nexthop") PFCTL_TEST(1075, "One shot rule") +PFCTL_TEST(1076, "State limiter") +PFCTL_TEST(1077, "Source limiter")