I want something like this rule:

pass in on bge0 proto tcp from any os "OpenBSD" to (bge0) port 222
divert-to localhost port ssh

pfctl tells me:
$ sudo pfctl -f /etc/pf.conf 
/etc/pf.conf:15: address family mismatch for divert
pfctl: Syntax error in config file: pf rules not loaded

?  What gives?  I figure, oh, maybe there's some ipv6 bullshit going
on here.  So I change localhost to 127.0.0.1, change bge0 to bge0:0,
no, it's still not happy.

rdr-to of course works exactly as I want to it.  But I've been told
I'm supposed to use divert-to and not rdr-to.

Reply via email to