On Thu, Aug 14, 2014 at 02:56:45PM -0400, Alan McKay wrote:

> internalIPS = { 1 2 3 }
> externalIPS = { 4 5 6 }
> 
> pass in  quick log on $extIf inet proto tcp from any to (externalIPs)
> port (some port) rdr-to (internalIPs)
> 
> Maybe I'm just hallucinating :-)

There's no such thing with lists or tables, but you might be thinking of
'bitmask'

  ... to 192.168.0.0/24 rdr-to 10.0.0.0/24 bitmask

which is short for

  ... to 192.168.0.1 rdr-to 10.0.0.1
  ... to 192.168.0.2 rdr-to 10.0.0.2
  ... to 192.168.0.3 rdr-to 10.0.0.3
  ...
  ... to 192.168.0.255 rdr-to 10.0.0.255

You can adjust the netmask and network bits on the right-most argument
to "shift" the range of the internal IPs, but it must always be an
continuous block.

There are more examples on

  http://www.openbsd.org/faq/pf/pools.html

HTH,
Daniel

Reply via email to