Date: Mon, 03 Apr 2006 13:45:28 +0200 From: Erik Norgaard <norgaard@locolomo.org> To: Juergen Heberling <pjah@hicom.net> Cc: freebsd-questions@freebsd.org Subject: Re: ipnat syntax error? Message-ID: <44310AD8.1050508@locolomo.org> In-Reply-To: <44310008.7010100@hicom.net> References: <442EEABE.5000803@hicom.net> <442F2B69.40503@locolomo.org> <442F3268.30409@hicom.net> <442FA797.6060307@locolomo.org> <44310008.7010100@hicom.net>
next in thread | previous in thread | raw e-mail | index | archive | help
Juergen Heberling wrote: > Due to historical reasons I can not just take a /29 or /30 block out of > the middle of the cidr I will ultimately use -- this FreeBSD server will > implement a firewall on an existing connection replacing an old Cisco > router that only NAT'd. So I will see if things can work with "just" > one "map" with portmaps. > > Please note that the "-" for the range syntax is documented in several > places, not just the FreeBSD handbook and should probably be fixed. check out packet filter as an alternative, you can map any pool of addresses as you like: http://openbsd.org/faq/pf/nat.html You can use a list or a table to specify what src addresses are mapped to what dst addresses. Cheers, Erik -- Ph: +34.666334818 web: www.locolomo.org S/MIME Certificate: www.daemonsecurity.com/ca/8D03551FFCE04F06.crt Subject ID: 9E:AA:18:E6:94:7A:91:44:0A:E4:DD:87:73:7F:4E:82:E7:08:9C:72 Fingerprint: 5B:D5:1E:3E:47:E7:EC:1C:4C:C8:3A:19:CC:AE:14:F5:DF:18:0F:B9
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?44310AD8.1050508>