aboutsummaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorKristof Provost <kp@FreeBSD.org>2026-01-12 20:32:13 +0000
committerKristof Provost <kp@FreeBSD.org>2026-01-14 06:44:43 +0000
commite28dfd6b5557a502bad6faecac4b0b8ecfd611cc (patch)
tree08a2a5d7d5b864b4d6d273edff77c388596666f5
parent8716d8c7d97eec231820ecd1dc50c67beb95d58c (diff)
pfctl: make the source limiter output match the input
When printing source limiters use the same keywords as we accept on input, that is use 'entries' for the entries value (not 'limit') and 'limit' for the limit value (and not 'states'). Update the test case to match. Sponsored by: Rubicon Communications, LLC ("Netgate")
-rw-r--r--sbin/pfctl/pfctl_parser.c2
-rw-r--r--sbin/pfctl/tests/files/pf1077.ok2
2 files changed, 2 insertions, 2 deletions
diff --git a/sbin/pfctl/pfctl_parser.c b/sbin/pfctl/pfctl_parser.c
index 78a1034a3b43..c6ad62555b86 100644
--- a/sbin/pfctl/pfctl_parser.c
+++ b/sbin/pfctl/pfctl_parser.c
@@ -869,7 +869,7 @@ print_statelim(const struct pfctl_state_lim *ioc)
void
print_sourcelim(const struct pfctl_source_lim *ioc)
{
- printf("source limiter %s id %u limit %u states %u", ioc->name,
+ printf("source limiter %s id %u entries %u limit %u", ioc->name,
ioc->id, ioc->entries, ioc->limit);
if (ioc->rate.limit != 0)
printf(" rate %u/%u", ioc->rate.limit, ioc->rate.seconds);
diff --git a/sbin/pfctl/tests/files/pf1077.ok b/sbin/pfctl/tests/files/pf1077.ok
index dc8882e1b87b..834399c40d8a 100644
--- a/sbin/pfctl/tests/files/pf1077.ok
+++ b/sbin/pfctl/tests/files/pf1077.ok
@@ -1,2 +1,2 @@
-source limiter dns-server id 1 limit 2 states 3 rate 4/5 inet mask 16
+source limiter dns-server id 1 entries 2 limit 3 rate 4/5 inet mask 16
pass in proto tcp from any to any port = domain flags S/SA keep state source limiter id 1 (no-match)