[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Nat and Packet rules



Is it correct/intentional that I can write:

	# VoIP
	pass in on $ext_if proto { udp, udp } \
	        from any \
        	to any port { 5060, 7999 >< 8008,  8765 >< 8768 } \
	        keep state

But NOT

	rdr on sis1 \
        	proto { udp, tcp } \
	        from any to 10.123.123.2 \
        	port { 5060, 7999 >< 8008, 8765 >< 8768 } \
	        -> 10.11.0.103

and that the latter needs to be written out for each port individually.
>From the pf.conf man page I kind of thoughd it suggested that the second
is fine.

DW