--- On Tue, 2/2/10, David Gwynne <[email protected]> wrote:
> 
> all the cool kids are going:
> 
> match out on vlan301 nat-to vlan301 received-on vlan303
> 
> 

I just got around to testing this rule and it didn't work for me as I would 
have expected.  The output of pfctl -nv -f /etc/pf.conf expanded to the inet6 
address of VLAN 301 interface by default.  When I changed the line to read

match out on vlan301 inet nat-to vlan301 received-on vlan303

it expanded to the inet address I would have expected to see by default.  Is 
this intended or a bug?  I would assume that you would want to expand to inet 
by default and not inet6.  This is of course just a matter of opinion.


---
James A. Peltier     [email protected]

Reply via email to