On Fri, 2023-04-07 at 10:30 +0000, Stuart Henderson wrote:
> On 2023-04-04, Nicolas Goy <[email protected]> wrote:
> 
> 
> Looking at pf.conf(5) for syntax I just tried something fairly
> obvious:
> 
> pass in quick log proto tcp from any to $v4_address port 8383 af-to
> inet6 from $dummy_v6_address to $listening_v6_address
> 

Yeah, but as you said, you lose source address.

I was trying to get the effect that the source address would be changed
in a predictable way.

For example, instead of dummy_v6_address, you give a /96 subnet, and
the source ipv4 would be put in the last 32 bits. But af-to seems to be
only able to do that with destination.



-- 
Nicolas Goy
Developer & Engineer

https://kuon.ch
https://goyman.com

Reply via email to