From nobody Tue Jul 15 10:07:51 2025 X-Original-To: dev-commits-src-all@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4bhFHY0t5Bz62DRM; Tue, 15 Jul 2025 10:07:53 +0000 (UTC) (envelope-from git@FreeBSD.org) Received: from mxrelay.nyi.freebsd.org (mxrelay.nyi.freebsd.org [IPv6:2610:1c1:1:606c::19:3]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "mxrelay.nyi.freebsd.org", Issuer "R10" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4bhFHX1DpDz3fR0; Tue, 15 Jul 2025 10:07:52 +0000 (UTC) (envelope-from git@FreeBSD.org) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1752574072; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding; bh=/XzKBXtLo8m/riwIC180TAIz9oPJJmVd1ARypPGfisQ=; b=nMCf8SrhFso7dP/xJI1wNmoCqN9rP9+g4R22yj12sDgNxbJ3Q7Fq/9oQaWSsTMKdcGBBTF z4o40M7Gba8i50j5ZOtp7IeHsY4I9igwrSpzacQMqbooYrpJFSkpSFc+/8EbgqD2Q6yzzC R04sY0nf8HNBRfCSMghcwc7M2F6T9fg0lxrQZt18FfYQfXjSaaGPs3otNKccDLARnIbSGT aRboIaZHFC90jFcMY1C/blEGiKTd9pjmE4e7qwrw/9KB5SfZA1ZC1mKDyQ33ysRq6Enwwz XuIpeyIE4rfJ04A+XvW8R0NBxFMuJTJ9i1N0u0XU7sQp/qUFa26nbSynEMswog== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1752574072; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding; bh=/XzKBXtLo8m/riwIC180TAIz9oPJJmVd1ARypPGfisQ=; b=Ni+SFCQH36XUyCtU7lr5M87jdkVfp1j/aqcaFqfA42ot097Ip1piRJFUthYBfwk1iBUAE7 uUBXjXYrAZ7kj2uanUxoKTIgaGLA+G3ILcLrDNEfZT5ZSawgXgiS1aI9snPAUi159L8bZA QigNIkD141pZkgzssGDfglKn0IsmHU741QSt3Vwq/CutcPIRu+xStSqurbDnb43ulMmiHF o8srcZQMfrPf3q3pSBhXaPaJRo0/H69vHS4Wb+HMnIBZcMd5Jb1cKOI4JDuegGESLERX8N siSTNqB0HwqgBjVj9oHGEFjUoygugS3BNP+EmIaC1ez/DyZD6lPaqqCltMh6UA== ARC-Authentication-Results: i=1; mx1.freebsd.org; none ARC-Seal: i=1; s=dkim; d=freebsd.org; t=1752574072; a=rsa-sha256; cv=none; b=azQ1C4n8qv4l3VorNx+qm3aw2v6CDr5UnGqBqxgrXujeEJZkRwSb94+S6OZDbgEXamxGyu ENiDexGUrmipQ3WL/VuVRrFTPYculgfLHhLxNYKjsMWeNE287sSIAZZgkUr3BJNo2QzhdW 8dz2ddFyI8azqDfJIG9JRauYeWYC/xpiq9vljKGAqRrIYa4+5g4eZ1mavHvW18F0ARJhk4 7U5f+JvBXYU7f+s4GBJL43H/DF7pssqUGFJG5OWwjy5UnB6eQ/29AKUhRDghfx2zXyimpK qdkzPBo+hKYJzfUTcZ9sf/j5lAjAoF3bEDp0xfmuMCLU/FnWGa6Kh7ir3qIPzg== Received: from gitrepo.freebsd.org (gitrepo.freebsd.org [IPv6:2610:1c1:1:6068::e6a:5]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (Client did not present a certificate) by mxrelay.nyi.freebsd.org (Postfix) with ESMTPS id 4bhFHW705JzbYq; Tue, 15 Jul 2025 10:07:51 +0000 (UTC) (envelope-from git@FreeBSD.org) Received: from gitrepo.freebsd.org ([127.0.1.44]) by gitrepo.freebsd.org (8.18.1/8.18.1) with ESMTP id 56FA7pSA027846; Tue, 15 Jul 2025 10:07:51 GMT (envelope-from git@gitrepo.freebsd.org) Received: (from git@localhost) by gitrepo.freebsd.org (8.18.1/8.18.1/Submit) id 56FA7p93027843; Tue, 15 Jul 2025 10:07:51 GMT (envelope-from git) Date: Tue, 15 Jul 2025 10:07:51 GMT Message-Id: <202507151007.56FA7p93027843@gitrepo.freebsd.org> To: src-committers@FreeBSD.org, dev-commits-src-all@FreeBSD.org, dev-commits-src-main@FreeBSD.org From: Kristof Provost Subject: git: bd6786eada91 - main - pfctl tests: avoid the synproxy warning List-Id: Commit messages for all branches of the src repository List-Archive: https://lists.freebsd.org/archives/dev-commits-src-all List-Help: List-Post: List-Subscribe: List-Unsubscribe: X-BeenThere: dev-commits-src-all@freebsd.org Sender: owner-dev-commits-src-all@FreeBSD.org MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 8bit X-Git-Committer: kp X-Git-Repository: src X-Git-Refname: refs/heads/main X-Git-Reftype: branch X-Git-Commit: bd6786eada918d0625e8cc84b69996d4f9547d3b Auto-Submitted: auto-generated The branch main has been updated by kp: URL: https://cgit.FreeBSD.org/src/commit/?id=bd6786eada918d0625e8cc84b69996d4f9547d3b commit bd6786eada918d0625e8cc84b69996d4f9547d3b Author: Kristof Provost AuthorDate: 2025-07-07 16:13:19 +0000 Commit: Kristof Provost CommitDate: 2025-07-15 07:55:29 +0000 pfctl tests: avoid the synproxy warning If we try to set a synproxy rule without restricting it to only the 'in' direction pfctl warns that the synproxy option will only apply to the inbound direction. Avoid this warning by explicitly limiting it to 'in'. Sponsored by: Rubicon Communications, LLC ("Netgate") --- sbin/pfctl/tests/files/pf0088.in | 2 +- sbin/pfctl/tests/files/pf0088.ok | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/sbin/pfctl/tests/files/pf0088.in b/sbin/pfctl/tests/files/pf0088.in index 4700b6916b7e..a85aa84a30bb 100644 --- a/sbin/pfctl/tests/files/pf0088.in +++ b/sbin/pfctl/tests/files/pf0088.in @@ -16,7 +16,7 @@ pass to 10.0.0.2 keep state block from 10.0.0.3 to 10.0.0.2 pass to 10.0.0.2 modulate state block from 10.0.0.3 to 10.0.0.2 -pass to 10.0.0.2 synproxy state +pass in to 10.0.0.2 synproxy state pass out proto tcp from 10.0.0.4 to 10.0.0.5 keep state diff --git a/sbin/pfctl/tests/files/pf0088.ok b/sbin/pfctl/tests/files/pf0088.ok index 47251a4503dd..801056a4ab46 100644 --- a/sbin/pfctl/tests/files/pf0088.ok +++ b/sbin/pfctl/tests/files/pf0088.ok @@ -11,7 +11,7 @@ pass inet from any to 10.0.0.2 flags S/SA keep state block drop inet from 10.0.0.3 to 10.0.0.2 pass inet from any to 10.0.0.2 flags S/SA modulate state block drop inet from 10.0.0.3 to 10.0.0.2 -pass inet from any to 10.0.0.2 flags S/SA synproxy state +pass in inet from any to 10.0.0.2 flags S/SA synproxy state pass out inet proto tcp from 10.0.0.4 to 10.0.0.5 flags S/SA keep state pass out inet proto tcp from 10.0.0.4 to 10.0.0.5 port = http flags S/SA keep state pass out all flags S/SA keep state