summaryrefslogtreecommitdiff
path: root/share/man
diff options
context:
space:
mode:
authorHenning Brauer <henning@cvs.openbsd.org>2003-07-07 08:42:39 +0000
committerHenning Brauer <henning@cvs.openbsd.org>2003-07-07 08:42:39 +0000
commitacbb446c7f69ef806686bd6f68473e7007106d63 (patch)
tree9f010e3c48e46f828b3a661155cbeb0bf6ac4ed4 /share/man
parent1b23b191e9e49be5111102965f0b5f7db9a06fac (diff)
clarification in nat pass, pointed out by theo
Diffstat (limited to 'share/man')
-rw-r--r--share/man/man5/pf.conf.510
1 files changed, 5 insertions, 5 deletions
diff --git a/share/man/man5/pf.conf.5 b/share/man/man5/pf.conf.5
index 4a057824580..ec57887e533 100644
--- a/share/man/man5/pf.conf.5
+++ b/share/man/man5/pf.conf.5
@@ -1,4 +1,4 @@
-.\" $OpenBSD: pf.conf.5,v 1.261 2003/07/07 08:38:03 henning Exp $
+.\" $OpenBSD: pf.conf.5,v 1.262 2003/07/07 08:42:38 henning Exp $
.\"
.\" Copyright (c) 2002, Daniel Hartmeier
.\" All rights reserved.
@@ -871,11 +871,11 @@ Since translation occurs before filtering the filter
engine will see packets as they look after any
addresses and ports have been translated. Filter rules
will therefore have to filter based on the translated
-address and port number. In addition, packets that
-match a translation rule are not automatically passed
-through the packet filter unless the
+address and port number.
+Packets that match a translation rule are only automatically passed if
+the
.Ar pass
-modifier is given; translated packets are
+modifier is given, otherwise they are
still subject to
.Ar block
and