[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Nat and Packet rules
Is it correct/intentional that I can write:
# VoIP
pass in on $ext_if proto { udp, udp } \
from any \
to any port { 5060, 7999 >< 8008, 8765 >< 8768 } \
keep state
But NOT
rdr on sis1 \
proto { udp, tcp } \
from any to 10.123.123.2 \
port { 5060, 7999 >< 8008, 8765 >< 8768 } \
-> 10.11.0.103
and that the latter needs to be written out for each port individually.
>From the pf.conf man page I kind of thoughd it suggested that the second
is fine.
DW