From: http://www.openbsd.org/faq/pf/rdr.html#rdrnat
"Think of it as a normal rdr rule (with no pass keyword) associated to a pass filter rule with the keep state keyword. However, if you want to enable more specific filtering options such as synproxy, modulate state, etc. you'll still have to use a dedicate pass rule as these options don't fit into redirection rules." With "keep state S/SA" now the default for 'normal' pass rules, does this apply to 'rdr pass' rules as well? Or does an 'rdr pass' still only imply "keep state" and not "keep state S/SA"? Thanks. -- Chris
