Lines Matching +full:set +full:- +full:up
2 # SPDX-License-Identifier: BSD-2-Clause
35 jexec $jail pfctl -si -v | grep -A 2 '^Syncookies' | grep active \
53 jexec alcatraz ifconfig ${epair}b 192.0.2.1/24 up
54 jexec alcatraz /usr/sbin/inetd -p ${PWD}/inetd-alcatraz.pid \
57 ifconfig ${epair}a 192.0.2.2/24 up
59 jexec alcatraz pfctl -e
61 "set syncookies always" \
66 atf_check -s exit:0 -o ignore ping -c 1 192.0.2.1
68 reply=$(echo foo | nc -N -w 5 192.0.2.1 7)
84 rm -f ${PWD}/inetd-alcatraz.pid
102 jexec alcatraz ifconfig ${epair}b inet6 2001:db8::1/64 up no_dad
103 jexec alcatraz /usr/sbin/inetd -p ${PWD}/inetd-alcatraz.pid \
106 ifconfig ${epair}a inet6 2001:db8::2/64 up no_dad
108 jexec alcatraz pfctl -e
110 "set syncookies always" \
115 atf_check -s exit:0 -o ignore ping6 -c 1 2001:db8::1
117 reply=$(echo foo | nc -N -w 5 2001:db8::1 7)
153 jexec fwd ifconfig ${epair_in}b 192.0.2.1/24 up
154 jexec fwd ifconfig ${epair_out}a 198.51.100.1/24 up
157 jexec srv ifconfig ${epair_out}b 198.51.100.2/24 up
159 jexec srv /usr/sbin/inetd -p ${PWD}/inetd-alcatraz.pid \
162 ifconfig ${epair_in}a 192.0.2.2/24 up
163 route add -net 198.51.100.0/24 192.0.2.1
165 jexec fwd pfctl -e
167 "set syncookies always" \
172 atf_check -s exit:0 -o ignore ping -c 1 198.51.100.2
174 reply=$(echo foo | nc -N -w 5 198.51.100.2 7)
203 jexec fwd ifconfig ${epair_in}b inet6 2001:db8::1/64 up no_dad
204 jexec fwd ifconfig ${epair_out}a inet6 2001:db8:1::1/64 up no_dad
207 jexec srv ifconfig ${epair_out}b inet6 2001:db8:1::2/64 up no_dad
208 jexec srv route -6 add default 2001:db8:1::1
209 jexec srv /usr/sbin/inetd -p ${PWD}/inetd-alcatraz.pid \
212 ifconfig ${epair_in}a inet6 2001:db8::2/64 up no_dad
213 route -6 add -net 2001:db8:1::/64 2001:db8::1
215 jexec fwd pfctl -e
217 "set syncookies always" \
222 atf_check -s exit:0 -o ignore ping6 -c 1 2001:db8:1::2
224 reply=$(echo foo | nc -N -w 5 2001:db8:1::2 7)
244 atf_check -e ignore pfctl -e
245 atf_check pfctl -f - <<__EOF__
246 set syncookies always
254 nc -l $addr $port >out &
256 atf_check nc -N $addr $port < in
258 atf_check -o file:in cat out
260 atf_check -e ignore pfctl -d
277 atf_check ifconfig lo0 up
305 atf_check ifconfig lo0 up
333 ifconfig ${epair}a 192.0.2.2/24 up
336 jexec alcatraz ifconfig ${epair}b 192.0.2.1/24 up
338 jexec alcatraz pfctl -e
340 "set syncookies always" \
345 atf_check -s exit:0 -o ignore ping -c 1 192.0.2.1
349 --sendif ${epair}a \
350 --to 192.0.2.2 \
351 --count 20
353 states=$(jexec alcatraz pfctl -ss | grep tcp)
354 if [ -n "$states" ];
379 ifconfig ${epair}a inet6 2001:db8::2/64 up no_dad
382 jexec alcatraz ifconfig ${epair}b inet6 2001:db8::1/64 up no_dad
384 jexec alcatraz pfctl -e
386 "set syncookies always" \
391 atf_check -s exit:0 -o ignore ping6 -c 1 2001:db8::1
395 --ip6 \
396 --sendif ${epair}a \
397 --to 2001:db8::2 \
398 --count 20
400 states=$(jexec alcatraz pfctl -ss | grep tcp)
401 if [ -n "$states" ];
426 ifconfig ${epair}a 192.0.2.2/24 up
429 jexec alcatraz ifconfig ${epair}b 192.0.2.1/24 up
431 jexec alcatraz pfctl -e
433 "set limit states 100" \
434 "set syncookies adaptive (start 10%%, end 5%%)" \
439 atf_check -s exit:0 -o ignore ping -c 1 192.0.2.1
450 --sendif ${epair}a \
451 --to 192.0.2.2 \
452 --count 100
463 states=$(jexec alcatraz pfctl -ss | grep tcp | wc -l)
464 if [ "$states" -gt 20 ];
489 jexec alcatraz pfctl -e
491 "set limit states 1" \
492 "set syncookies adaptive (start 10%%, end 5%%)" \
497 "set limit states 326000000" \
498 "set syncookies adaptive (start 10%%, end 5%%)" \
511 atf_set descr 'Test rapid port re-use'
523 jexec alcatraz ifconfig ${epair}b 192.0.2.1/24 up
524 jexec alcatraz /usr/sbin/inetd -p ${PWD}/inetd-alcatraz.pid \
527 ifconfig ${epair}a 192.0.2.2/24 up
529 jexec alcatraz pfctl -e
530 jexec alcatraz pfctl -x loud
532 "set syncookies always" \
537 atf_check -s exit:0 -o ignore ping -c 1 192.0.2.1
539 reply=$(echo foo | nc -p 1234 -N -w 5 192.0.2.1 7)
545 # We can't re-use the source IP/port combo quickly enough, so we're
549 jexec singsing ifconfig ${epair}a 192.0.2.2/24 up
550 atf_check -s exit:0 -o ignore jexec singsing ping -c 1 192.0.2.1
552 reply=$(echo bar | jexec singsing nc -p 1234 -N -w 5 192.0.2.1 7)