summaryrefslogtreecommitdiff
path: root/share
diff options
context:
space:
mode:
authorHenning Brauer <henning@cvs.openbsd.org>2002-10-14 12:59:41 +0000
committerHenning Brauer <henning@cvs.openbsd.org>2002-10-14 12:59:41 +0000
commit4f9b6bc2671eee3368a49892a08de874f9773ef5 (patch)
tree88ddac86078722236906b0e40bbccde4898bc7f8 /share
parenta8ab16cd8c9e42f285ffda9418546711ee901f98 (diff)
document binat netblocks
from ryan
Diffstat (limited to 'share')
-rw-r--r--share/man/man5/pf.conf.59
1 files changed, 5 insertions, 4 deletions
diff --git a/share/man/man5/pf.conf.5 b/share/man/man5/pf.conf.5
index a5a7bbe68e5..e11fe85160b 100644
--- a/share/man/man5/pf.conf.5
+++ b/share/man/man5/pf.conf.5
@@ -1,4 +1,4 @@
-.\" $OpenBSD: pf.conf.5,v 1.95 2002/10/14 09:21:34 henning Exp $
+.\" $OpenBSD: pf.conf.5,v 1.96 2002/10/14 12:59:40 henning Exp $
.\"
.\" Copyright (c) 2002, Daniel Hartmeier
.\" All rights reserved.
@@ -285,8 +285,8 @@ IPv6 packets are not defragmented.
.It Em binat
A
.Em binat
-rule specifies a bidirectional mapping between an external IP address
-and an internal IP address.
+rule specifies a bidirectional mapping between an external IP netblock
+and an internal IP netblock.
.It Em nat
A
.Em nat
@@ -1092,7 +1092,8 @@ nat_rule = [ "no" ] "nat" "on" ifspec [ af ] [ protospec ] hosts
binat_rule = [ "no" ] "binat" "on" interface-name [ af ]
[ "proto" ( proto-name | proto-number ) ]
- "from" address "to" ipspec [ "->" address ] .
+ "from" address [ "/" mask-bits ] "to" ipspec
+ [ "->" address [ "/" mask-bits ] ] .
rdr_rule = [ "no" ] "rdr" "on" ifspec [ af ] [ protospec ]
"from" ipspec "to" ipspec [ portspec ]