networking - 将 PF 语法从 OpenBSD 4.4 转换为 5.5：“rdr on”、“no nat on”、“nat on”

Question

如何将下面的 PF 语法从 OpenBSD 4.4 转换为 OpenBSD 5.5？

rdr on $IF_LAN proto tcp from $LAN to $IP_WAN port http -> $WEB_SERV
no nat on $IF_LAN proto tcp from $IF_LAN to $LAN
nat on $IF_LAN proto tcp from $LAN to $WEB_SERV port http -> $IP_LAN

Answer 1

对 rdr-to 使用 pass in，对 nat-to 使用 pass out

pass in on $IF_LAN proto tcp from $LAN to $IP_WAN port http rdr-to $WEB_SERV
pass out on $IF_LAN proto tcp from $LAN to $WEB_SERV port http nat-to $IP_LAN

no nat 似乎是关于设计的问题