PF(oh) LOCAL PF(oh) pf - configuration PORT FORWARDING Forwarding needs to be allowed in the system: sysctl net.inet.ip.forwarding=1 /etc/pf.conf pass in quick proto tcp from any to egress port [PUBLIC_PORT] rdr-to [WEB_SERVER] port [INTERNAL_PORT] pass out on egress proto tcp to [WEB_SERVER] port [INTERNAL_PORT] received-on egress nat-to egress SEE ALSO - OpenBSD manpages: pfctl(8) , pf.conf(5) AUTHORS ohazot(oh) | about(oh) | ohazot.com: https://ohazot.com OpenBSD 7.7| Created:2025-10-03|Updated:2025-10-06| PF(oh)