ipnat syntax error?

[fbsd_user]

You can use this format of the ipnat map command

map dc0 10.0.10.1/29 -> 20.20.20.5-20.20.20.7

-----Original Message-----
From: owner-freebsd-questions at freebsd.org
[mailto:owner-freebsd-questions at freebsd.org]On Behalf Of Erik Norgaard
Sent: Monday, April 03, 2006 7:45 AM
To: Juergen Heberling
Cc: freebsd-questions at freebsd.org
Subject: Re: ipnat syntax error?


Juergen Heberling wrote:
> Due to historical reasons I can not just take a /29 or /30 block out of 
> the middle of the cidr I will ultimately use -- this FreeBSD server will 
> implement a firewall on an existing connection replacing an old Cisco 
> router that only NAT'd.  So I will see if things can work with "just" 
> one "map" with portmaps.
> 
> Please note that the "-" for the range syntax is documented in several 
> places, not just the FreeBSD handbook and should probably be fixed.

check out packet filter as an alternative, you can map any pool of 
addresses as you like:

   http://openbsd.org/faq/pf/nat.html

You can use a list or a table to specify what src addresses are mapped to 
what dst addresses.

Cheers, Erik
-- 
Ph: +34.666334818                                  web: www.locolomo.org
S/MIME Certificate: www.daemonsecurity.com/ca/8D03551FFCE04F06.crt
Subject ID:  9E:AA:18:E6:94:7A:91:44:0A:E4:DD:87:73:7F:4E:82:E7:08:9C:72
Fingerprint: 5B:D5:1E:3E:47:E7:EC:1C:4C:C8:3A:19:CC:AE:14:F5:DF:18:0F:B9
_______________________________________________
freebsd-questions at freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscribe at freebsd.org"