sorry for the delay. IMO the most straighforward way to make that work as intended is using tags here.
Index: nat.html =================================================================== RCS file: /cvs/www/faq/pf/nat.html,v diff -u -p -r1.80 nat.html --- nat.html 16 Apr 2026 02:11:01 -0000 1.80 +++ nat.html 3 Jun 2026 13:08:09 -0000 @@ -335,8 +335,8 @@ used. This would lead to a most basic form of these lines similar to this: <pre class="cmdbox"> -match out on tl0 from 192.168.1.0/24 to any nat-to 198.51.100.1 -pass on tl0 from 192.168.1.0/24 to any +match out on tl0 from 192.168.1.0/24 to any nat-to 198.51.100.1 tag NATed +pass out on tl0 tagged NATed </pre> Or the following may be used: -- Henning Brauer, [email protected], [email protected] BS Web Services GmbH, http://bsws.de, Full-Service ISP Secure Hosting, Mail and DNS. Virtual & Dedicated Servers, Root to Fully Managed Henning Brauer Consulting, http://henningbrauer.com/

