diff options
| author |   henning <henning@openbsd.org> | 2003-07-07 08:42:38 +0000 |
|---|---|---|
| committer | henning <henning@openbsd.org> | 2003-07-07 08:42:38 +0000 |
| commit | 7651ee45a7d9187eeaadaedf2ef360f07bb6ebd8 (patch) | |
| tree | 9b2e0d09847f86bed5a4b74e0865faf96894bd16 | |
| parent | I'm pretty sure the formatting cleanup & clarifications here that Joel Knight (diff) | |
| download | wireguard-openbsd-7651ee45a7d9187eeaadaedf2ef360f07bb6ebd8.tar.xz wireguard-openbsd-7651ee45a7d9187eeaadaedf2ef360f07bb6ebd8.zip | |
clarification in nat pass, pointed out by theo
| -rw-r--r-- | share/man/man5/pf.conf.5 | 10 |
1 files changed, 5 insertions, 5 deletions
diff --git a/share/man/man5/pf.conf.5 b/share/man/man5/pf.conf.5 index 4a057824580..ec57887e533 100644 --- a/share/man/man5/pf.conf.5 +++ b/share/man/man5/pf.conf.5 @@ -1,4 +1,4 @@ -.\" $OpenBSD: pf.conf.5,v 1.261 2003/07/07 08:38:03 henning Exp $ +.\" $OpenBSD: pf.conf.5,v 1.262 2003/07/07 08:42:38 henning Exp $ .\" .\" Copyright (c) 2002, Daniel Hartmeier .\" All rights reserved. @@ -871,11 +871,11 @@ Since translation occurs before filtering the filter engine will see packets as they look after any addresses and ports have been translated. Filter rules will therefore have to filter based on the translated -address and port number. In addition, packets that -match a translation rule are not automatically passed -through the packet filter unless the +address and port number. +Packets that match a translation rule are only automatically passed if +the .Ar pass -modifier is given; translated packets are +modifier is given, otherwise they are still subject to .Ar block and |