rdr-to translation option for destination NAT / PNAT Typical (or traditional) configuration for proxies: anchor "ftp-proxy/*" pass in quick inet proto tcp to port ftp \ rdr-to 127.0.0.1 port 8021 Uses NAT to redirect connections to a listening userland socket PF rewrites the destination address and source port The outgoing route lookup sends it to localhost The proxy does a DIOCNATLOOK ioctl(2) to get the original destination SHOULD NOT be used for new proxies