diff options
| author |   henning <henning@openbsd.org> | 2010-09-24 09:19:04 +0000 |
|---|---|---|
| committer | henning <henning@openbsd.org> | 2010-09-24 09:19:04 +0000 |
| commit | 6909677a49d6aa52fc3da15b48d5900fc0859bb6 (patch) | |
| tree | 4af1ae59f74797c3ba9903f0a8799dc0ba45698c | |
| parent | remove the check that enforced rdr-to only inbound and nat-to only outbound. (diff) | |
| download | wireguard-openbsd-6909677a49d6aa52fc3da15b48d5900fc0859bb6.tar.xz wireguard-openbsd-6909677a49d6aa52fc3da15b48d5900fc0859bb6.zip | |
for rdr-to and nat-to, mention in which direction they are usually used
and mention the constraints for use in the "unnatural" direction
ok claudio ryan dlg
| -rw-r--r-- | share/man/man5/pf.conf.5 | 8 |
1 files changed, 6 insertions, 2 deletions
diff --git a/share/man/man5/pf.conf.5 b/share/man/man5/pf.conf.5 index 93e38bc254a..8536ba49584 100644 --- a/share/man/man5/pf.conf.5 +++ b/share/man/man5/pf.conf.5 @@ -1,4 +1,4 @@ -.\" $OpenBSD: pf.conf.5,v 1.478 2010/09/22 06:03:32 henning Exp $ +.\" $OpenBSD: pf.conf.5,v 1.479 2010/09/24 09:19:04 henning Exp $ .\" .\" Copyright (c) 2002, Daniel Hartmeier .\" All rights reserved. @@ -27,7 +27,7 @@ .\" ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE .\" POSSIBILITY OF SUCH DAMAGE. .\" -.Dd $Mdocdate: September 22 2010 $ +.Dd $Mdocdate: September 24 2010 $ .Dt PF.CONF 5 .Os .Sh NAME @@ -778,6 +778,8 @@ Those netblocks are: 10.0.0.0 \(en 10.255.255.255 (all of net 10, i.e. 10/8) 172.16.0.0 \(en 172.31.255.255 (i.e. 172.16/12) 192.168.0.0 \(en 192.168.255.255 (i.e. 192.168/16) +.Ar nat-to is usually applied outbound. If applied inbound, nat-to +a local IP address is not supported. .Ed .It Pa rdr-to The packet is redirected to another destination and possibly a @@ -791,6 +793,8 @@ redirects ports 2000 to 2999 (inclusive) to port 4000. .Pp .It match in ... port 2000:2999 rdr-to ... port 4000:* redirects port 2000 to 4000, port 2001 to 4001, ..., port 2999 to 4999. +.Ar rdr-to is usually applied inbound. If applied outbound, rdr-to +a local IP address is not supported. .El .El .Pp |