Make it clear that aliasing is done on the public interface, not
the private one.
This commit is contained in:
parent
bbc4f6d526
commit
f7d1db72cf
Notes:
svn2git
2020-12-20 02:59:44 +00:00
svn path=/head/; revision=32856
@ -214,7 +214,23 @@ as the alias address. If this option is not specified, the
|
|||||||
.Fl n
|
.Fl n
|
||||||
or
|
or
|
||||||
.Fl interface
|
.Fl interface
|
||||||
option must be used.
|
option must be used. The specified address should be the address assigned
|
||||||
|
to the public network interface.
|
||||||
|
.Pp
|
||||||
|
All data passing out through this addresses interface will be rewritten
|
||||||
|
with a source address equal to
|
||||||
|
.Ar address .
|
||||||
|
All data arriving at the interface from outside will be checked to
|
||||||
|
see if it matches any already-aliased outgoing connection. If it does,
|
||||||
|
the packet is altered accordingly. If not, all
|
||||||
|
.Fl redirect_port
|
||||||
|
and
|
||||||
|
.Fl redirect_address
|
||||||
|
assignments are checked and actioned. If no other action can be made,
|
||||||
|
and if
|
||||||
|
.Fl deny_incoming
|
||||||
|
is not specified, the packet is delivered to the local machine and port
|
||||||
|
as specified in the packet.
|
||||||
|
|
||||||
.It Fl n | interface Ar interface
|
.It Fl n | interface Ar interface
|
||||||
Use
|
Use
|
||||||
@ -229,7 +245,10 @@ flag should also be used. If this option is not specified, the
|
|||||||
or
|
or
|
||||||
.Fl alias_address
|
.Fl alias_address
|
||||||
flag must be used.
|
flag must be used.
|
||||||
|
.Pp
|
||||||
|
The specified
|
||||||
|
.Ar interface
|
||||||
|
must be the public network interface.
|
||||||
.It Fl f | config Ar configfile
|
.It Fl f | config Ar configfile
|
||||||
Read configuration from
|
Read configuration from
|
||||||
.Ar configfile .
|
.Ar configfile .
|
||||||
|
@ -214,7 +214,23 @@ as the alias address. If this option is not specified, the
|
|||||||
.Fl n
|
.Fl n
|
||||||
or
|
or
|
||||||
.Fl interface
|
.Fl interface
|
||||||
option must be used.
|
option must be used. The specified address should be the address assigned
|
||||||
|
to the public network interface.
|
||||||
|
.Pp
|
||||||
|
All data passing out through this addresses interface will be rewritten
|
||||||
|
with a source address equal to
|
||||||
|
.Ar address .
|
||||||
|
All data arriving at the interface from outside will be checked to
|
||||||
|
see if it matches any already-aliased outgoing connection. If it does,
|
||||||
|
the packet is altered accordingly. If not, all
|
||||||
|
.Fl redirect_port
|
||||||
|
and
|
||||||
|
.Fl redirect_address
|
||||||
|
assignments are checked and actioned. If no other action can be made,
|
||||||
|
and if
|
||||||
|
.Fl deny_incoming
|
||||||
|
is not specified, the packet is delivered to the local machine and port
|
||||||
|
as specified in the packet.
|
||||||
|
|
||||||
.It Fl n | interface Ar interface
|
.It Fl n | interface Ar interface
|
||||||
Use
|
Use
|
||||||
@ -229,7 +245,10 @@ flag should also be used. If this option is not specified, the
|
|||||||
or
|
or
|
||||||
.Fl alias_address
|
.Fl alias_address
|
||||||
flag must be used.
|
flag must be used.
|
||||||
|
.Pp
|
||||||
|
The specified
|
||||||
|
.Ar interface
|
||||||
|
must be the public network interface.
|
||||||
.It Fl f | config Ar configfile
|
.It Fl f | config Ar configfile
|
||||||
Read configuration from
|
Read configuration from
|
||||||
.Ar configfile .
|
.Ar configfile .
|
||||||
|
Loading…
Reference in New Issue
Block a user