$OpenBSD: patch-sslsplit_1,v 1.5 2016/03/28 21:37:25 sthen Exp $
--- sslsplit.1.orig	Sun Mar 27 14:46:35 2016
+++ sslsplit.1	Mon Mar 28 22:31:36 2016
@@ -299,7 +299,7 @@ Drop privileges after opening sockets and files by set
 effective and stored user IDs to \fIuser\fP and loading the appropriate
 primary and ancillary groups.  If \fB-u\fP is not given, SSLsplit will drop
 privileges to the stored UID if EUID != UID (setuid bit scenario), or to
-\fBnobody\fP if running with full \fBroot\fP privileges (EUID == UID == 0).
+\fB_sslsplit\fP if running with full \fBroot\fP privileges (EUID == UID == 0).
 Due to an Apple bug, \fB-u\fP cannot be used with \fBpf\fP proxyspecs on
 Mac OS X.
 .TP
@@ -512,6 +512,19 @@ First in IPFW, then in pf \fBdivert-to\fP syntax:
 \fBipfw add fwd       ::1,10443 tcp from 2001:db8::/64 to any 443\fP
 \fBipfw add fwd 127.0.0.1,10080 tcp from 192.0.2.0/24  to any  80\fP
 \fBipfw add fwd 127.0.0.1,10443 tcp from 192.0.2.0/24  to any 443\fP
+.fi
+.RE
+.LP
+.RS
+.nf
+\fBpass in quick on em0 proto tcp from 2001:db8::/64 to any port  80 \\
+         divert-to       ::1 port 10080\fP
+\fBpass in quick on em0 proto tcp from 2001:db8::/64 to any port 443 \\
+         divert-to       ::1 port 10443\fP
+\fBpass in quick on em0 proto tcp from  192.0.2.0/24 to any port  80 \\
+         divert-to 127.0.0.1 port 10080\fP
+\fBpass in quick on em0 proto tcp from  192.0.2.0/24 to any port 443 \\
+         divert-to 127.0.0.1 port 10443\fP
 .fi
 .RE
 .LP
