Hi folks,

i am studying pf and a doubt arose!

Since my state policy if if-bound (set state-policy if-bound) i need two
rules for each traffic i want to pass. Is that understanding right ?

For instance, for nat i could :

pass out on tl0 from dc0:network to any nat-to tl0

pass in on dc0 from dc0:network to any

Is this understanding correct ? Or only the first rule is ok?

Thanks.

Reply via email to