summaryrefslogtreecommitdiff
path: root/share/man
diff options
context:
space:
mode:
authorHenning Brauer <henning@cvs.openbsd.org>2010-09-24 09:19:05 +0000
committerHenning Brauer <henning@cvs.openbsd.org>2010-09-24 09:19:05 +0000
commit87fa355d9467034581950b4117118addb4e6c565 (patch)
tree1ee607e9d1ed812f04702e3c1e94726ab77a8602 /share/man
parent8ded4c8d3876d5cbb4fb4eeb92ed53499dc5c4bd (diff)
for rdr-to and nat-to, mention in which direction they are usually used
and mention the constraints for use in the "unnatural" direction ok claudio ryan dlg
Diffstat (limited to 'share/man')
-rw-r--r--share/man/man5/pf.conf.58
1 files changed, 6 insertions, 2 deletions
diff --git a/share/man/man5/pf.conf.5 b/share/man/man5/pf.conf.5
index 93e38bc254a..8536ba49584 100644
--- a/share/man/man5/pf.conf.5
+++ b/share/man/man5/pf.conf.5
@@ -1,4 +1,4 @@
-.\" $OpenBSD: pf.conf.5,v 1.478 2010/09/22 06:03:32 henning Exp $
+.\" $OpenBSD: pf.conf.5,v 1.479 2010/09/24 09:19:04 henning Exp $
.\"
.\" Copyright (c) 2002, Daniel Hartmeier
.\" All rights reserved.
@@ -27,7 +27,7 @@
.\" ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE
.\" POSSIBILITY OF SUCH DAMAGE.
.\"
-.Dd $Mdocdate: September 22 2010 $
+.Dd $Mdocdate: September 24 2010 $
.Dt PF.CONF 5
.Os
.Sh NAME
@@ -778,6 +778,8 @@ Those netblocks are:
10.0.0.0 \(en 10.255.255.255 (all of net 10, i.e. 10/8)
172.16.0.0 \(en 172.31.255.255 (i.e. 172.16/12)
192.168.0.0 \(en 192.168.255.255 (i.e. 192.168/16)
+.Ar nat-to is usually applied outbound. If applied inbound, nat-to
+a local IP address is not supported.
.Ed
.It Pa rdr-to
The packet is redirected to another destination and possibly a
@@ -791,6 +793,8 @@ redirects ports 2000 to 2999 (inclusive) to port 4000.
.Pp
.It match in ... port 2000:2999 rdr-to ... port 4000:*
redirects port 2000 to 4000, port 2001 to 4001, ..., port 2999 to 4999.
+.Ar rdr-to is usually applied inbound. If applied outbound, rdr-to
+a local IP address is not supported.
.El
.El
.Pp