Module Name: src
Committed By: maxv
Date: Mon Aug 27 13:09:16 UTC 2018
Modified Files:
src/usr.sbin/npf/npfctl: npf.conf.5
Log Message:
Improve the "Map" section.
To generate a diff of this commit:
cvs rdiff -u -r1.64 -r1.65 src/usr.sbin/npf/npfctl/npf.conf.5
Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.
Modified files:
Index: src/usr.sbin/npf/npfctl/npf.conf.5
diff -u src/usr.sbin/npf/npfctl/npf.conf.5:1.64 src/usr.sbin/npf/npfctl/npf.conf.5:1.65
--- src/usr.sbin/npf/npfctl/npf.conf.5:1.64 Mon Aug 27 12:46:03 2018
+++ src/usr.sbin/npf/npfctl/npf.conf.5 Mon Aug 27 13:09:16 2018
@@ -1,4 +1,4 @@
-.\" $NetBSD: npf.conf.5,v 1.64 2018/08/27 12:46:03 maxv Exp $
+.\" $NetBSD: npf.conf.5,v 1.65 2018/08/27 13:09:16 maxv Exp $
.\"
.\" Copyright (c) 2009-2017 The NetBSD Foundation, Inc.
.\" All rights reserved.
@@ -258,12 +258,22 @@ inbound NAT (translation of the destinat
bi-directional NAT (combination of inbound and outbound NAT)
.El
.Pp
-The following would translate the source to the IP address specified
-by the $pub_ip for the packets on the interface $ext_if.
+The following would translate the source (10.1.1.0/24) to the IP address
+specified by $pub_ip for the packets on the interface $ext_if.
.Bd -literal
map $ext_if dynamic 10.1.1.0/24 -> $pub_ip
.Ed
.Pp
+Several NAT algorithms are available, and can be chosen using the
+.Cd algo
+keyword.
+By default, NPF will use the NAPT algorithm.
+The other available algorithms are:
+.Bl -tag -width Xnpt66XX -offset indent
+.It npt66
+IPv6-to-IPv6 network prefix translation (NPTv6).
+.El
+.Pp
Translations are implicitly filtered by limiting the operation to the
network segments specified, that is, translation would be performed only
on packets originating from the 10.1.1.0/24 network.
