git: 0ec87a46e68c - main - pf.conf.5: improve af-to example

From: Kristof Provost <kp_at_FreeBSD.org>
Date: Wed, 23 Apr 2025 11:56:55 UTC
The branch main has been updated by kp:

URL: https://cgit.FreeBSD.org/src/commit/?id=0ec87a46e68ce324ccc95010947c5eedfe2062b8

commit 0ec87a46e68ce324ccc95010947c5eedfe2062b8
Author:     Kristof Provost <kp@FreeBSD.org>
AuthorDate: 2025-04-22 09:33:09 +0000
Commit:     Kristof Provost <kp@FreeBSD.org>
CommitDate: 2025-04-23 08:15:08 +0000

    pf.conf.5: improve af-to example
    
    Specify "to" addresses in one of the examples that shows use of af-to for
    inet6->inet. Without this, local network traffic (including neighbour
    discovery etc) will also get translated. From Peter J. Philipp, with a
    tweak to break long lines.
    
    Obtained from:  OpenBSD, sthen <sthen@openbsd.org>, bb46494cdb
    Sponsored by:   Rubicon Communications, LLC ("Netgate")
---
 share/man/man5/pf.conf.5 | 6 ++++--
 1 file changed, 4 insertions(+), 2 deletions(-)

diff --git a/share/man/man5/pf.conf.5 b/share/man/man5/pf.conf.5
index 05b4a79290b9..6ff3d50e6dc3 100644
--- a/share/man/man5/pf.conf.5
+++ b/share/man/man5/pf.conf.5
@@ -1404,8 +1404,10 @@ translated to 2001:db8::c633:6464.
 .Pp
 In the reverse case the following rules are identical:
 .Bd -literal -offset indent
-pass in inet6 af-to inet from 198.51.100.1 to 0.0.0.0/0
-pass in inet6 af-to inet from 198.51.100.1
+pass in inet6 from any to 64:ff9b::/96 af-to inet \e
+       from 198.51.100.1 to 0.0.0.0/0
+pass in inet6 from any to 64:ff9b::/96 af-to inet \e
+       from 198.51.100.1
 .Ed
 .Pp
 The destination IPv4 address is assumed to be embedded inside the