diff options
| author |   sthen <sthen@openbsd.org> | 2011-01-20 08:44:12 +0000 |
|---|---|---|
| committer | sthen <sthen@openbsd.org> | 2011-01-20 08:44:12 +0000 |
| commit | 9635f7a231895f4b9f93afeca5cd9b08e4869eed (patch) | |
| tree | c7613e7383e5b0cd9aeb8417d3283ef63b6d0ccf | |
| parent | group filesystems together (diff) | |
| download | wireguard-openbsd-9635f7a231895f4b9f93afeca5cd9b08e4869eed.tar.xz wireguard-openbsd-9635f7a231895f4b9f93afeca5cd9b08e4869eed.zip | |
Fix an example using rdr-to where a couple of hosts were exempted from
the redirect; the sample rule used "match" for the general case which
negated the exemptions. From Harald Dunkel.
| -rw-r--r-- | share/man/man5/pf.conf.5 | 6 |
1 files changed, 3 insertions, 3 deletions
diff --git a/share/man/man5/pf.conf.5 b/share/man/man5/pf.conf.5 index f3fb92cbcb6..ebc267ae453 100644 --- a/share/man/man5/pf.conf.5 +++ b/share/man/man5/pf.conf.5 @@ -1,4 +1,4 @@ -.\" $OpenBSD: pf.conf.5,v 1.486 2010/12/31 12:15:31 bluhm Exp $ +.\" $OpenBSD: pf.conf.5,v 1.487 2011/01/20 08:44:12 sthen Exp $ .\" .\" Copyright (c) 2002, Daniel Hartmeier .\" All rights reserved. @@ -27,7 +27,7 @@ .\" ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE .\" POSSIBILITY OF SUCH DAMAGE. .\" -.Dd $Mdocdate: December 31 2010 $ +.Dd $Mdocdate: January 20 2011 $ .Dt PF.CONF 5 .Os .Sh NAME @@ -2554,7 +2554,7 @@ pass out on $ext_if proto ah from 144.19.74.0/24 In the example below, packets bound for one specific server, as well as those generated by the sysadmins are not proxied; all other connections are. .Bd -literal -offset 4n -match in on $int_if proto { tcp, udp } from any to any port 80 \e +pass in on $int_if proto { tcp, udp } from any to any port 80 \e rdr-to 127.0.0.1 port 80 pass in on $int_if proto { tcp, udp } from any to $server port 80 pass in on $int_if proto { tcp, udp } from $sysadmins to any port 80 |