git: 0ec87a46e68c - main - pf.conf.5: improve af-to example
- Go to: [ bottom of page ] [ top of archives ] [ this month ]
Date: Wed, 23 Apr 2025 11:56:55 UTC
The branch main has been updated by kp: URL: https://cgit.FreeBSD.org/src/commit/?id=0ec87a46e68ce324ccc95010947c5eedfe2062b8 commit 0ec87a46e68ce324ccc95010947c5eedfe2062b8 Author: Kristof Provost <kp@FreeBSD.org> AuthorDate: 2025-04-22 09:33:09 +0000 Commit: Kristof Provost <kp@FreeBSD.org> CommitDate: 2025-04-23 08:15:08 +0000 pf.conf.5: improve af-to example Specify "to" addresses in one of the examples that shows use of af-to for inet6->inet. Without this, local network traffic (including neighbour discovery etc) will also get translated. From Peter J. Philipp, with a tweak to break long lines. Obtained from: OpenBSD, sthen <sthen@openbsd.org>, bb46494cdb Sponsored by: Rubicon Communications, LLC ("Netgate") --- share/man/man5/pf.conf.5 | 6 ++++-- 1 file changed, 4 insertions(+), 2 deletions(-) diff --git a/share/man/man5/pf.conf.5 b/share/man/man5/pf.conf.5 index 05b4a79290b9..6ff3d50e6dc3 100644 --- a/share/man/man5/pf.conf.5 +++ b/share/man/man5/pf.conf.5 @@ -1404,8 +1404,10 @@ translated to 2001:db8::c633:6464. .Pp In the reverse case the following rules are identical: .Bd -literal -offset indent -pass in inet6 af-to inet from 198.51.100.1 to 0.0.0.0/0 -pass in inet6 af-to inet from 198.51.100.1 +pass in inet6 from any to 64:ff9b::/96 af-to inet \e + from 198.51.100.1 to 0.0.0.0/0 +pass in inet6 from any to 64:ff9b::/96 af-to inet \e + from 198.51.100.1 .Ed .Pp The destination IPv4 address is assumed to be embedded inside the