CVSROOT: /cvs
Module name: src
Changes by: k...@cvs.openbsd.org 2019/09/15 06:06:20
Modified files:
usr.sbin/vmctl : vmctl.8
Log message:
Use (egress) in nat-to example
Without parentheses, this rule evaluates to the static list of
addresses at loadtime; this can be a problem when the machine's
network is not fully established when pf.conf is loaded.
>From pf.conf(5):
When the interface name is surrounded by parentheses, the rule is
automatically updated whenever the interface changes its address.
The ruleset does not need to be reloaded.
This is especially useful with NAT.
This syncs vmctl(8) with the VMM FAQ.
Pointed out by Matthias Schmidt, thanks!
