pf rdr (redirect) syntax solved

Mark Moellering mark at msen.com
Wed Nov 30 17:11:31 UTC 2011


My apologies for posting an answer without a question but this is 
something I want searchable in the future.
To use redirection ( rdr ) in pf, you MUST specify an ip address or 
interface.
For example, if you want to force external traffic coming in on port 80 
to port 443 and write this;

rdr on $interface inet proto tcp from ! $internal_addresses to 
$interface port 80 -> port 443

it FAILS!  The PROPER syntax is;

rdr on $interface inet proto tcp from ! $internal_addresses to 
$interface port 80 -> $interface port 443

I hope this helps someone...

Mark Moellering


More information about the freebsd-questions mailing list