On Thu, Aug 14, 2014 at 02:56:45PM -0400, Alan McKay wrote: > internalIPS = { 1 2 3 } > externalIPS = { 4 5 6 } > > pass in quick log on $extIf inet proto tcp from any to (externalIPs) > port (some port) rdr-to (internalIPs) > > Maybe I'm just hallucinating :-)
There's no such thing with lists or tables, but you might be thinking of 'bitmask' ... to 192.168.0.0/24 rdr-to 10.0.0.0/24 bitmask which is short for ... to 192.168.0.1 rdr-to 10.0.0.1 ... to 192.168.0.2 rdr-to 10.0.0.2 ... to 192.168.0.3 rdr-to 10.0.0.3 ... ... to 192.168.0.255 rdr-to 10.0.0.255 You can adjust the netmask and network bits on the right-most argument to "shift" the range of the internal IPs, but it must always be an continuous block. There are more examples on http://www.openbsd.org/faq/pf/pools.html HTH, Daniel