Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 30 Mar 2005 14:16:33 -0800
From:      "Rob Rogers" <rob@rogerscorp.us>
To:        <doc@FreeBSD.org>
Subject:   Error in Docs
Message-ID:  <002001c53576$21d99d90$1e00a8c0@jack1>

next in thread | raw e-mail | index | archive | help
Page: http://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/firewalls-ipf.html
Section: 24.5.20 Port Redirection

The docs mention port redirection with IPNAT using
map dc0 20.20.20.5/32 port 80 -> 10.0.10.25 port 80
or
map dc0 0/32 port 80 -> 10.0.10.25 port 80

and a DNS example:
map dc0 20.20.20.5/32 port 53 -> 10.0.10.33 port 53 udp


These are all incorrect, port redirection with IPNAT uses "rdr" not "map" and the mask for "0" is "/0" not "/32".


So the correct examples should be:
rdr dc0 20.20.20.5/32 port 80 -> 10.0.10.25 port 80
or
rdr dc0 0/0 port 80 -> 10.0.10.25 port 80

and a DNS example:
rdr dc0 20.20.20.5/32 port 53 -> 10.0.10.33 port 53 udp


Rob Rogers
Product Manager
Jacklighter, Inc
Phone 714.628.0556
Fax   714.639.7785



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?002001c53576$21d99d90$1e00a8c0>