From owner-freebsd-questions@FreeBSD.ORG Sun Nov 21 04:54:18 2004 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 3897316A4CE for ; Sun, 21 Nov 2004 04:54:18 +0000 (GMT) Received: from skippyii.compar.com (ftp.compar.com [216.208.38.130]) by mx1.FreeBSD.org (Postfix) with ESMTP id 9DDC543D1D for ; Sun, 21 Nov 2004 04:54:17 +0000 (GMT) (envelope-from matt@gsicomp.on.ca) Received: from hermes (CPE00062566c7bb-CM000039c69a66.cpe.net.cable.rogers.com [69.193.82.185]) by skippyii.compar.com (8.12.9p2/8.12.9) with ESMTP id iAL513De020411 for ; Sun, 21 Nov 2004 00:01:04 -0500 (EST) (envelope-from matt@gsicomp.on.ca) Message-ID: <001501c4cf85$ca4f2140$1200a8c0@gsicomp.on.ca> From: "Matt Emmerton" To: References: <20041121035057.GA56121@keyslapper.org> Date: Sat, 20 Nov 2004 23:51:39 -0500 MIME-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: 7bit X-Priority: 3 X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook Express 6.00.2800.1437 X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1441 Subject: Re: Natd manpage interpretation problem . . . X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 21 Nov 2004 04:54:18 -0000 > I know similar questions have been asked in the past, and I'm sure the > natd manpage has it described quite clearly, but I just can't seem to > figure this out. > > I'm trying to automagically route all udp ports above 1023 coming from > a network block to a machine on the internal network. > > My understanding of the natd manpage is that I simply need to put a > line like this in /etc/natd.conf: > > redirect_port udp :1024-65535 /xx:1024-65535 > > What am I doing wrong here? Based on my reading of the natd man pages, all of the redirect_xxx options only work on single IPs -- not netblocks. If you want to redirect traffic for a specific netblock, you need to have a rule for every IP in the block. -- Matt Emmerton