yes it works well. But it's very interesting the use of tag. Is egress:0 the if alias ?
2017-03-01 16:09 GMT+01:00 Stuart Henderson <[email protected]>: > On 2017-03-01, Frank White <[email protected]> wrote: > > Hi, > > anyone know how to configure pf to make hairpin nat ? > > Should be something like this. > > pass in quick inet proto tcp to self port 7755 rdr-to $SOMEHOST port 80 > tag hairpin > pass out quick inet tagged hairpin nat-to egress:0
