diff options
| author | Stuart Henderson <sthen@cvs.openbsd.org> | 2016-09-24 10:10:59 +0000 |
|---|---|---|
| committer | Stuart Henderson <sthen@cvs.openbsd.org> | 2016-09-24 10:10:59 +0000 |
| commit | 73c7cb6e01c1a117dae0f46547b92d846e636212 (patch) | |
| tree | e4fa70fa31dcf82d9c8e30cc80d8c282e0d412f3 /share | |
| parent | f6ef2dc3461904995c16fcd9d2f188a4543f0082 (diff) | |
Specify "to" addresses in one of the examples that shows use of af-to for
inet6->inet. Without this, local network traffic (including neighbour
discovery etc) will also get translated. From Peter J. Philipp, with a
tweak to break long lines.
Diffstat (limited to 'share')
| -rw-r--r-- | share/man/man5/pf.conf.5 | 10 |
1 files changed, 6 insertions, 4 deletions
diff --git a/share/man/man5/pf.conf.5 b/share/man/man5/pf.conf.5 index 55391fe404e..1e41d7452a2 100644 --- a/share/man/man5/pf.conf.5 +++ b/share/man/man5/pf.conf.5 @@ -1,4 +1,4 @@ -.\" $OpenBSD: pf.conf.5,v 1.553 2016/09/13 19:15:50 jmc Exp $ +.\" $OpenBSD: pf.conf.5,v 1.554 2016/09/24 10:10:58 sthen Exp $ .\" .\" Copyright (c) 2002, Daniel Hartmeier .\" Copyright (c) 2003 - 2013 Henning Brauer <henning@openbsd.org> @@ -28,7 +28,7 @@ .\" ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE .\" POSSIBILITY OF SUCH DAMAGE. .\" -.Dd $Mdocdate: September 13 2016 $ +.Dd $Mdocdate: September 24 2016 $ .Dt PF.CONF 5 .Os .Sh NAME @@ -863,8 +863,10 @@ translated to 2001:db8::c633:6464. .Pp In the reverse case the following rules are identical: .Bd -literal -offset indent -pass in inet6 af-to inet from 198.51.100.1 to 0.0.0.0/0 -pass in inet6 af-to inet from 198.51.100.1 +pass in inet6 from any to 64:ff9b::/96 af-to inet \e + from 198.51.100.1 to 0.0.0.0/0 +pass in inet6 from any to 64:ff9b::/96 af-to inet \e + from 198.51.100.1 .Ed .Pp The destination IPv4 address is assumed to be embedded inside the |