I'm wanting to modify some firewall/NAT rules on a device (Apple Airport) running NetBSD 4.0. I'm not that familiar with BSD and pf, so want to check the right approach. I can change the pf.conf file (using sed) to the required configuration, then load using
pfctl -f /etc/pf.conf, but am wondering if this clears out the old rules first?
Alternately, what would be the best approach to doing this directly via the command line (i.e. removing old the
rdr pass and
nat rules, and adding new ones?)
(for context, the aim here is to be able to change NAT rules on an Apple Airport Extreme without having to restart the device, which brings the whole network down for a minute or so; I've successfully gained ssh access)