On 17/06/2015, at 4:26 AM, Mike Belopuhov wrote: > > You didn't read the pf.conf manual page carefully: > > [...] Because address family translation > overrides the routing table, it's only possible to use af-to on > inbound rules, and a source address for the resulting > translation must always be specified. > > And all example rules after that use "pass in".
Thanks for the pointer, I'll have another go at testing this then. best, Richard.
