Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 13 May 2009 14:09:05 -0400
From:      alexus <alexus@gmail.com>
To:        "freebsd-questions@freebsd.org" <freebsd-questions@freebsd.org>
Subject:   Re: ipnat port-range
Message-ID:  <6ae50c2d0905131109j7d61075ao1a0b329a1b2fd122@mail.gmail.com>
In-Reply-To: <6ae50c2d0905130958r6877114bgbea6a4f717c1287d@mail.gmail.com>
References:  <6ae50c2d0905130958r6877114bgbea6a4f717c1287d@mail.gmail.com>

next in thread | previous in thread | raw e-mail | index | archive | help
On Wed, May 13, 2009 at 12:58 PM, alexus <alexus@gmail.com> wrote:
> i need to redirect bunch of ports, or port-range from outside to my jail
>
> # /etc/rc.d/ipnat reload
> /etc/rc.d/ipnat: DEBUG: checkyesno: ipnat_enable is set to YES.
> /etc/rc.d/ipnat: DEBUG: run_rc_command: doit: /sbin/ipnat -F -C -f
> /etc/ipnat.rules
> 0 entries flushed from NAT table
> 2 entries flushed from NAT list
> syntax error error at "port-range", line 8
> # grep port-range /etc/ipnat.rules
> rdr bce0 0/0 port-range 49152:65534 -> lama port-range 49152:65534 tcp
> #
>
>
>
> --
> http://alexus.org/
>

that rule is wrong to begin with as rdr doesn't work with ranges, i
guess I need to use something else..

anyone done something like that? use ipnat to map range of ports? this
is for ftp PASV

-- 
http://alexus.org/



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?6ae50c2d0905131109j7d61075ao1a0b329a1b2fd122>