diff options
| author |   sthen <sthen@openbsd.org> | 2016-09-24 10:10:58 +0000 |
|---|---|---|
| committer | sthen <sthen@openbsd.org> | 2016-09-24 10:10:58 +0000 |
| commit | bb46494cdb07401250d55f4547b5e7fb123889fd (patch) | |
| tree | ba7edaeb7a2048fc812f16f32b747d5cc46e43f8 /share/man/man5 | |
| parent | recpect W^X, sparc64 still has a problem: non-exec mmap: execute (diff) | |
| download | wireguard-openbsd-bb46494cdb07401250d55f4547b5e7fb123889fd.tar.xz wireguard-openbsd-bb46494cdb07401250d55f4547b5e7fb123889fd.zip | |
Specify "to" addresses in one of the examples that shows use of af-to for
inet6->inet. Without this, local network traffic (including neighbour
discovery etc) will also get translated. From Peter J. Philipp, with a
tweak to break long lines.
Diffstat (limited to 'share/man/man5')
| -rw-r--r-- | share/man/man5/pf.conf.5 | 10 |
1 files changed, 6 insertions, 4 deletions
diff --git a/share/man/man5/pf.conf.5 b/share/man/man5/pf.conf.5 index 55391fe404e..1e41d7452a2 100644 --- a/share/man/man5/pf.conf.5 +++ b/share/man/man5/pf.conf.5 @@ -1,4 +1,4 @@ -.\" $OpenBSD: pf.conf.5,v 1.553 2016/09/13 19:15:50 jmc Exp $ +.\" $OpenBSD: pf.conf.5,v 1.554 2016/09/24 10:10:58 sthen Exp $ .\" .\" Copyright (c) 2002, Daniel Hartmeier .\" Copyright (c) 2003 - 2013 Henning Brauer <henning@openbsd.org> @@ -28,7 +28,7 @@ .\" ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE .\" POSSIBILITY OF SUCH DAMAGE. .\" -.Dd $Mdocdate: September 13 2016 $ +.Dd $Mdocdate: September 24 2016 $ .Dt PF.CONF 5 .Os .Sh NAME @@ -863,8 +863,10 @@ translated to 2001:db8::c633:6464. .Pp In the reverse case the following rules are identical: .Bd -literal -offset indent -pass in inet6 af-to inet from 198.51.100.1 to 0.0.0.0/0 -pass in inet6 af-to inet from 198.51.100.1 +pass in inet6 from any to 64:ff9b::/96 af-to inet \e + from 198.51.100.1 to 0.0.0.0/0 +pass in inet6 from any to 64:ff9b::/96 af-to inet \e + from 198.51.100.1 .Ed .Pp The destination IPv4 address is assumed to be embedded inside the |