PF rdr all but <table>

[Dmitry Samersoff]

I have a rule that redirects certain addresses of 10.20.1.0 network to an internal site:

rdr pass on $int_if proto tcp from <landed> to any -> $landing_ip

But <landed> contains most of addresses from the network so I would like to redirect all BUT <whitelist>.

Is there a way to do it?

Any advice is much appreciated.

 

[junovitch@]

Use an inverse condition for the match.

... from ! <whitelist> ...