Hi folks, pf.conf(5) says
In the example below, packets bound for one specific server, as well as those generated by the sysadmins are not proxied; all other connections are. match in on $int_if proto { tcp, udp } from any to any port 80 \ rdr-to 127.0.0.1 port 80 pass in on $int_if proto { tcp, udp } from any to $server port 80 pass in on $int_if proto { tcp, udp } from $sysadmins to any port 80 I don't see that yet. All traffic for 80/tcp on $int_if matches the first line, so I would assume that all this traffic is redirected, regardless whether the following "pass in" rules match. They don't "undo" the redirection. ??? Sorry for asking. This might be trivial to you, but I am still trying to get used to the new packet filter syntax. Of course I checked the FAQs. Any helpful comment would be highly appreciated. Regards Harri