It was so nice getting my old setup with my Soekris net4801 and OpenBSD up and running again. I had been neglecting upgrading the net4801 for a long time, so it was reinstalled with OpenBSD 4.8… and the old
pf.conf didn’t work.
match out on egress inet from !(egress) to any nat-to (egress:0)
Very neat and tidy. The
egress interface is the interface with the default gateway on, and it gets defined automatically by PF. Practical.