From owner-freebsd-questions@FreeBSD.ORG Mon Apr 3 17:01:33 2006 Return-Path: X-Original-To: freebsd-questions@freebsd.org Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id EFFF316A420 for ; Mon, 3 Apr 2006 17:01:33 +0000 (UTC) (envelope-from fbsd_user@a1poweruser.com) Received: from mta10.adelphia.net (mta10.adelphia.net [68.168.78.202]) by mx1.FreeBSD.org (Postfix) with ESMTP id 8BE9243D5D for ; Mon, 3 Apr 2006 17:01:33 +0000 (GMT) (envelope-from fbsd_user@a1poweruser.com) Received: from barbish ([70.39.69.56]) by mta10.adelphia.net (InterMail vM.6.01.05.02 201-2131-123-102-20050715) with SMTP id <20060403170132.DBXX8301.mta10.adelphia.net@barbish>; Mon, 3 Apr 2006 13:01:32 -0400 From: "fbsd_user" To: "Juergen Heberling" Date: Mon, 3 Apr 2006 13:01:26 -0400 Message-ID: MIME-Version: 1.0 Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable X-Priority: 3 (Normal) X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook IMO, Build 9.0.6604 (9.0.2911.0) In-Reply-To: <44310AD8.1050508@locolomo.org> X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1478 Importance: Normal Cc: freebsd-questions@freebsd.org Subject: RE: ipnat syntax error? X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list Reply-To: fbsd_user@a1poweruser.com List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 03 Apr 2006 17:01:34 -0000 You can use this format of the ipnat map command map dc0 10.0.10.1/29 -> 20.20.20.5-20.20.20.7 -----Original Message----- From: owner-freebsd-questions@freebsd.org [mailto:owner-freebsd-questions@freebsd.org]On Behalf Of Erik Norgaard Sent: Monday, April 03, 2006 7:45 AM To: Juergen Heberling Cc: freebsd-questions@freebsd.org Subject: Re: ipnat syntax error? Juergen Heberling wrote: > Due to historical reasons I can not just take a /29 or /30 block out = of=20 > the middle of the cidr I will ultimately use -- this FreeBSD server = will=20 > implement a firewall on an existing connection replacing an old Cisco=20 > router that only NAT'd. So I will see if things can work with "just"=20 > one "map" with portmaps. >=20 > Please note that the "-" for the range syntax is documented in several = > places, not just the FreeBSD handbook and should probably be fixed. check out packet filter as an alternative, you can map any pool of=20 addresses as you like: http://openbsd.org/faq/pf/nat.html You can use a list or a table to specify what src addresses are mapped = to=20 what dst addresses. Cheers, Erik --=20 Ph: +34.666334818 web: www.locolomo.org S/MIME Certificate: www.daemonsecurity.com/ca/8D03551FFCE04F06.crt Subject ID: 9E:AA:18:E6:94:7A:91:44:0A:E4:DD:87:73:7F:4E:82:E7:08:9C:72 Fingerprint: 5B:D5:1E:3E:47:E7:EC:1C:4C:C8:3A:19:CC:AE:14:F5:DF:18:0F:B9 _______________________________________________ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to = "freebsd-questions-unsubscribe@freebsd.org"