route-to rules take ips, not interfaces with optional ips.

reminded by bluhm@

no route-to/reply-to/dup-to on block rules, aka make this pass again
triggered by bluhm's *meep, secret*

adjust for port numbers instead of names by default
From: Lawrence Teo <lteo at devio at us>

Update regress tests for the following changes:
- if_addr RB_TREE (Address sort differently on an interface)
- skip steps changes
- RDOMAIN
- reordering of address/port tests
- fastroute is gone
-

Update regress tests for the following changes:
- if_addr RB_TREE (Address sort differently on an interface)
- skip steps changes
- RDOMAIN
- reordering of address/port tests
- fastroute is gone
- keep state is no longer printed by default
- lo0 now has link-local scope address in addition to ::1

show more ...

Update regress output files to -current behaviour
- non-pool translation/routing specification
- leftover bits from nat-to/rdr-to/binat-to

more updates for new pf with source-hash manually added to
loaded output as it doesn't currently appear as it should.

ok henning@

Handle default 'flags S/SA keep state', 'no state' and 'flags any'.

lo1, tun0, tun1 don't exist any more. thus, create the interfaces we need for
regress purposes before starting and destroy them afterwards.
lo1 -> lo1000000
tun0 -> tun1000000
tun1 -> tun1000001

ok

lo1, tun0, tun1 don't exist any more. thus, create the interfaces we need for
regress purposes before starting and destroy them afterwards.
lo1 -> lo1000000
tun0 -> tun1000000
tun1 -> tun1000001

ok markus@

show more ...

Big Sync

Add "reply-to" keyword to regress test.

block -> block drop

no more rule numbers in output

make succeed again; explicit address family needed in one more case now

Update for new semantics of set_ipmask (netmask is applied immediately
to an address by pfctl).

adapt to new dup-to syntax

Add dynamic (in-kernel) interface name -> address translation. Instead of
using just the interface name instead of an address and reloading the rule
set whenever the interface changes its address, th

Add dynamic (in-kernel) interface name -> address translation. Instead of
using just the interface name instead of an address and reloading the rule
set whenever the interface changes its address, the interface name can be
put in parentheses, and the kernel will keep track of changes and update
rules. There is no additional cost for evaluating rules (per packet),
the cost occurs when an interface changes address (and the rules are
traversed and updated where necessary).

show more ...

And adjust regress tests to match the rule number output.

add tests for fastroute options