diff options
| author |   kn <kn@openbsd.org> | 2019-09-15 12:06:20 +0000 |
|---|---|---|
| committer | kn <kn@openbsd.org> | 2019-09-15 12:06:20 +0000 |
| commit | b2b2ce5f3e6dd8ed396a59f148352da622d90a8a (patch) | |
| tree | 4c3fe77bc527a390483982ecaed5e3385ed4f18b /usr.sbin/vmctl | |
| parent | Xr cn30xxgmx 4 (diff) | |
| download | wireguard-openbsd-b2b2ce5f3e6dd8ed396a59f148352da622d90a8a.tar.xz wireguard-openbsd-b2b2ce5f3e6dd8ed396a59f148352da622d90a8a.zip | |
Use (egress) in nat-to example
Without parentheses, this rule evaluates to the static list of
addresses at loadtime; this can be a problem when the machine's
network is not fully established when pf.conf is loaded.
From pf.conf(5):
When the interface name is surrounded by parentheses, the rule is
automatically updated whenever the interface changes its address.
The ruleset does not need to be reloaded.
This is especially useful with NAT.
This syncs vmctl(8) with the VMM FAQ.
Pointed out by Matthias Schmidt, thanks!
Diffstat (limited to 'usr.sbin/vmctl')
| -rw-r--r-- | usr.sbin/vmctl/vmctl.8 | 6 |
1 files changed, 3 insertions, 3 deletions
diff --git a/usr.sbin/vmctl/vmctl.8 b/usr.sbin/vmctl/vmctl.8 index 330203834da..b8a402df7a8 100644 --- a/usr.sbin/vmctl/vmctl.8 +++ b/usr.sbin/vmctl/vmctl.8 @@ -1,4 +1,4 @@ -.\" $OpenBSD: vmctl.8,v 1.69 2019/08/08 20:37:08 fcambus Exp $ +.\" $OpenBSD: vmctl.8,v 1.70 2019/09/15 12:06:20 kn Exp $ .\" .\" Copyright (c) 2015 Mike Larkin <mlarkin@openbsd.org> .\" @@ -14,7 +14,7 @@ .\" ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF .\" OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE. .\" -.Dd $Mdocdate: August 8 2019 $ +.Dd $Mdocdate: September 15 2019 $ .Dt VMCTL 8 .Os .Sh NAME @@ -361,7 +361,7 @@ with an entry in the host machine's .Pa /etc/pf.conf similar to the following: .Bd -literal -offset indent -pass out on $ext_if from 100.64.0.0/10 to any nat-to $ext_if +pass out on egress from 100.64.0.0/10 to any nat-to (egress) .Ed .Pp If desired, DNS queries originating from guest VMs can be redirected to a |