A quick read of the faq shows the "pass" keyword causes a bypass all 
filtering ...so don't use it if you want your filters to be applied .


Bruce Bauer wrote:
quoted text
> Using OpenBSD 4.0
> Using binat for the first time in the real world
> Questions:
> binat pass on fxp0 from $server_int to any -> $server_ext
> does this bypass all other pf filter rules?
> binat on fxp0 from $server_int to any -> $server_ext
> does this form allow filtering?
> Googleing comes up with many different opinions