View Single Post
  #1   (View Single Post)  
Old 17th July 2015
daemonbak daemonbak is offline
Fdisk Soldier
 
Join Date: Feb 2015
Posts: 51
Default Round-Robin AND Static-Port in the same rule?

I was wondering why the rule that I have defined as static-port also shows up as round-robin. Is this right?

pf.conf excerpt:
Code:
### Network Address Translation
match out log on egress inet from !(egress:network) to any nat-to (egress:0)

### Network Address Translation (NAT with outgoing source port randomization)
match out log on egress from !$xboxone to any nat-to (egress:0) port 1024:65535

### Do not perform source-port randomization for the XBox One
match out log on egress from $xboxone to any nat-to (egress:0) static-port
pfctl -a '*' -sr output:
Quote:
match out on egress inet from ! (egress:network) to any nat-to (egress:0) round-robin
match out log on egress inet from ! 192.168.222.4 to any nat-to (egress:0) port 1024:65535 round-robin
match out log on egress inet from 192.168.222.4 to any nat-to (egress:0) round-robin static-port

Thanks as always
Reply With Quote