From owner-freebsd-questions@FreeBSD.ORG  Sun Apr  2 01:40:00 2006
Return-Path: <owner-freebsd-questions@FreeBSD.ORG>
X-Original-To: freebsd-questions@freebsd.org
Delivered-To: freebsd-questions@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id CF46016A401
	for <freebsd-questions@freebsd.org>;
	Sun,  2 Apr 2006 01:40:00 +0000 (UTC)
	(envelope-from norgaard@locolomo.org)
Received: from strange.daemonsecurity.com
	(59.Red-81-33-11.staticIP.rima-tde.net [81.33.11.59])
	by mx1.FreeBSD.org (Postfix) with ESMTP id 358A043D45
	for <freebsd-questions@freebsd.org>;
	Sun,  2 Apr 2006 01:39:59 +0000 (GMT)
	(envelope-from norgaard@locolomo.org)
Received: from [172.16.2.1] (charm.daemonsecurity.com [172.16.2.1])
	by strange.daemonsecurity.com (Postfix) with ESMTP id 4CC832E04B;
	Sun,  2 Apr 2006 03:40:06 +0200 (CEST)
Message-ID: <442F2B69.40503@locolomo.org>
Date: Sun, 02 Apr 2006 03:39:53 +0200
From: =?ISO-8859-1?Q?Erik_N=F8rgaard?= <norgaard@locolomo.org>
Organization: Locolomo.ORG
User-Agent: Thunderbird 1.5 (X11/20060312)
MIME-Version: 1.0
To: Juergen Heberling <pjah@hicom.net>
References: <442EEABE.5000803@hicom.net>
In-Reply-To: <442EEABE.5000803@hicom.net>
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit
Cc: freebsd-questions@freebsd.org
Subject: Re: ipnat syntax error?
X-BeenThere: freebsd-questions@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: User questions <freebsd-questions.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>, 
	<mailto:freebsd-questions-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-questions>
List-Post: <mailto:freebsd-questions@freebsd.org>
List-Help: <mailto:freebsd-questions-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>, 
	<mailto:freebsd-questions-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Sun, 02 Apr 2006 01:40:00 -0000

Juergen Heberling wrote:
> Could someone please check me on this ...
> 
> fw1# ipnat -CFn -f /etc/ipnat.rules
> 0 entries flushed from NAT table
> 1 entries flushed from NAT list
> syntax error error at "-", line 1
> 
> /etc/ipnat.rules contains:
> map  em0 192.168.1.0/24 -> 204.134.75.1-10
> .. snip ..
> 
> line 1 in the rules file is the example from the FreeBSD handbook.
> I'm running FreeBSD6.0 stable.

It seems to be a documentation bug, the ipf-howto.txt distributed with 
ipfilter makes no mention of that notation, instead you should use cidr 
notation, for example

   204.134.75.0/29

Erik


-- 
Ph: +34.666334818                                  web: www.locolomo.org
S/MIME Certificate: www.daemonsecurity.com/ca/8D03551FFCE04F06.crt
Subject ID:  9E:AA:18:E6:94:7A:91:44:0A:E4:DD:87:73:7F:4E:82:E7:08:9C:72
Fingerprint: 5B:D5:1E:3E:47:E7:EC:1C:4C:C8:3A:19:CC:AE:14:F5:DF:18:0F:B9