From owner-freebsd-questions@FreeBSD.ORG  Mon Apr  3 11:45:42 2006
Return-Path: <owner-freebsd-questions@FreeBSD.ORG>
X-Original-To: freebsd-questions@freebsd.org
Delivered-To: freebsd-questions@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id A874716A400
	for <freebsd-questions@freebsd.org>;
	Mon,  3 Apr 2006 11:45:42 +0000 (UTC)
	(envelope-from norgaard@locolomo.org)
Received: from strange.daemonsecurity.com
	(59.Red-81-33-11.staticIP.rima-tde.net [81.33.11.59])
	by mx1.FreeBSD.org (Postfix) with ESMTP id 3183D43D4C
	for <freebsd-questions@freebsd.org>;
	Mon,  3 Apr 2006 11:45:42 +0000 (GMT)
	(envelope-from norgaard@locolomo.org)
Received: from [172.24.8.84] (generic.atosorigin.es [212.170.156.200])
	by strange.daemonsecurity.com (Postfix) with ESMTP id A2F752E04B;
	Mon,  3 Apr 2006 13:45:47 +0200 (CEST)
Message-ID: <44310AD8.1050508@locolomo.org>
Date: Mon, 03 Apr 2006 13:45:28 +0200
From: Erik Norgaard <norgaard@locolomo.org>
User-Agent: Thunderbird 1.5 (X11/20060118)
MIME-Version: 1.0
To: Juergen Heberling <pjah@hicom.net>
References: <442EEABE.5000803@hicom.net>
	<442F2B69.40503@locolomo.org>	<442F3268.30409@hicom.net>
	<442FA797.6060307@locolomo.org> <44310008.7010100@hicom.net>
In-Reply-To: <44310008.7010100@hicom.net>
Content-Type: text/plain; charset=UTF-8; format=flowed
Content-Transfer-Encoding: 7bit
Cc: freebsd-questions@freebsd.org
Subject: Re: ipnat syntax error?
X-BeenThere: freebsd-questions@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: User questions <freebsd-questions.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>, 
	<mailto:freebsd-questions-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-questions>
List-Post: <mailto:freebsd-questions@freebsd.org>
List-Help: <mailto:freebsd-questions-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>, 
	<mailto:freebsd-questions-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Mon, 03 Apr 2006 11:45:42 -0000

Juergen Heberling wrote:
> Due to historical reasons I can not just take a /29 or /30 block out of 
> the middle of the cidr I will ultimately use -- this FreeBSD server will 
> implement a firewall on an existing connection replacing an old Cisco 
> router that only NAT'd.  So I will see if things can work with "just" 
> one "map" with portmaps.
> 
> Please note that the "-" for the range syntax is documented in several 
> places, not just the FreeBSD handbook and should probably be fixed.

check out packet filter as an alternative, you can map any pool of 
addresses as you like:

   http://openbsd.org/faq/pf/nat.html

You can use a list or a table to specify what src addresses are mapped to 
what dst addresses.

Cheers, Erik
-- 
Ph: +34.666334818                                  web: www.locolomo.org
S/MIME Certificate: www.daemonsecurity.com/ca/8D03551FFCE04F06.crt
Subject ID:  9E:AA:18:E6:94:7A:91:44:0A:E4:DD:87:73:7F:4E:82:E7:08:9C:72
Fingerprint: 5B:D5:1E:3E:47:E7:EC:1C:4C:C8:3A:19:CC:AE:14:F5:DF:18:0F:B9