CVSROOT: /cvs Module name: src Changes by: k...@cvs.openbsd.org 2019/09/15 06:06:20
Modified files: usr.sbin/vmctl : vmctl.8 Log message: Use (egress) in nat-to example Without parentheses, this rule evaluates to the static list of addresses at loadtime; this can be a problem when the machine's network is not fully established when pf.conf is loaded. >From pf.conf(5): When the interface name is surrounded by parentheses, the rule is automatically updated whenever the interface changes its address. The ruleset does not need to be reloaded. This is especially useful with NAT. This syncs vmctl(8) with the VMM FAQ. Pointed out by Matthias Schmidt, thanks!