Two pf questions

[Kristof Provost]

On 27 Mar 2017, at 16:37, David Mehler wrote:
> My second question is one of nat reflection is the term. I've got a
> jail running a service on port 8000. I've got external redirect rules
> and pass rules passing in the traffic. The problem is I've got need to
> get access to that machine port 8000 on the host machine.
>
> I try something like ssh user at xxx.xxx.xxx.xxx -p 8000
>

Presumably you’ve got a rule like this:
rdr on $ext_if proto tcp from any to any port 8000 -> $jail port 80

Add something like
rdr on $int_if proto tcp from $localnet to ($ext_if) port 8000 -> $jail 
port 80

Regards,
Kristof