From owner-freebsd-doc@FreeBSD.ORG Thu Mar 31 22:03:25 2005
Return-Path: <owner-freebsd-doc@FreeBSD.ORG>
Delivered-To: freebsd-doc@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
by hub.freebsd.org (Postfix) with ESMTP
id E498516A4CE; Thu, 31 Mar 2005 22:03:24 +0000 (GMT)
Received: from sccmmhc92.asp.att.net (sccmmhc92.asp.att.net [204.127.203.212])
by mx1.FreeBSD.org (Postfix) with ESMTP
id 56CD043D45; Thu, 31 Mar 2005 22:03:24 +0000 (GMT)
(envelope-from josh@tcbug.org)
Received: from [10.0.0.10] (12-218-21-193.client.mchsi.com[12.218.21.193])
by sccmmhc92.asp.att.net (sccmmhc92) with ESMTP
id <20050331220324m9200ge841e>; Thu, 31 Mar 2005 22:03:24 +0000
From: Josh Paetzel <josh@tcbug.org>
To: freebsd-doc@freebsd.org
Date: Thu, 31 Mar 2005 16:03:23 -0600
User-Agent: KMail/1.7
References: <1112306009.0@twinmp.tcbug.org>
In-Reply-To: <1112306009.0@twinmp.tcbug.org>
MIME-Version: 1.0
Content-Type: text/plain;
charset="iso-8859-1"
Content-Transfer-Encoding: 7bit
Content-Disposition: inline
Message-Id: <200503311603.23447.josh@tcbug.org>
cc: FreeBSD gnats submit <FreeBSD-gnats-submit@freebsd.org>
cc: rob@rogerscorp.us
Subject: Re: docs/79414: Error in handbook 24.5.20 port redirection page
X-BeenThere: freebsd-doc@freebsd.org
X-Mailman-Version: 2.1.1
Precedence: list
List-Id: Documentation project <freebsd-doc.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-doc>,
<mailto:freebsd-doc-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-doc>
List-Post: <mailto:freebsd-doc@freebsd.org>
List-Help: <mailto:freebsd-doc-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-doc>,
<mailto:freebsd-doc-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Thu, 31 Mar 2005 22:03:25 -0000
On Thursday 31 March 2005 15:53, Josh Paetzel wrote:
> >Number: 79414
> >Category: docs
> >Synopsis: Error in handbook 24.5.20 port redirection page
> >Confidential: no
> >Severity: non-critical
> >Priority: low
> >Responsible: freebsd-doc
> >State: open
> >Quarter:
> >Keywords:
> >Date-Required:
> >Class: doc-bug
> >Submitter-Id: current-users
> >Arrival-Date: Thu Mar 31 22:00:18 GMT 2005
> >Closed-Date:
> >Last-Modified:
> >Originator: Josh Paetzel
> >Release: FreeBSD 5.3-RELEASE-p6 i386
> >Organization:
> >Environment:
>
> System: FreeBSD 5.3-RELEASE-p6 #0: Mon Mar 28 16:29:35 CST 2005
> jpaetzel@twinmp.tcbug.org:/usr/src/sys/i386/compile/TWINMP
>
> >Description:
>
> The documentation for ipnat uses map when it should be rdr for
> forwarding ports through the nat.
>
> >How-To-Repeat:
>
> Look at section 24.5.20 in the handbook.
>
> http://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/firewalls
>-ipf.html
>
> >Fix:
>
> --- chapter.sgml.old Thu Mar 31 15:44:59 2005
> +++ chapter.sgml Thu Mar 31 15:47:12 2005
> @@ -1965,17 +1965,17 @@
> address is <hostid role="ipaddr">20.20.20.5</hostid> you
> would code the rule like this:</para>
>
> - <programlisting>map dc0 20.20.20.5/32 port 80 -> 10.0.10.25
> port 80</programlisting> + <programlisting>rdr dc0
> 20.20.20.5/32 port 80 -> 10.0.10.25 port 80</programlisting>
>
> <para>or:</para>
>
> - <programlisting>map dc0 0/32 port 80 -> 10.0.10.25 port
> 80</programlisting> + <programlisting>rdr dc0 0/32 port 80 ->
> 10.0.10.25 port 80</programlisting>
>
> <para>or for a LAN DNS Server on LAN address of <hostid
> role="ipaddr">10.0.10.33</hostid> that needs to receive
> public DNS requests:</para>
>
> - <programlisting>map dc0 20.20.20.5/32 port 53 -> 10.0.10.33
> port 53 udp</programlisting> + <programlisting>rdr dc0
> 20.20.20.5/32 port 53 -> 10.0.10.33 port 53 udp</programlisting>
> </sect2>
>
> <sect2>
>
> >Release-Note:
> >Audit-Trail:
> >Unformatted:
>
I hate to respond to myself but I screwed up the patch...Here's the
correct one:
--- chapter.sgml.old Thu Mar 31 15:44:59 2005
+++ chapter.sgml Thu Mar 31 15:59:58 2005
@@ -1965,17 +1965,17 @@
address is <hostid role="ipaddr">20.20.20.5</hostid> you would
code the rule like this:</para>
- <programlisting>map dc0 20.20.20.5/32 port 80 -> 10.0.10.25
port 80</programlisting>
+ <programlisting>rdr dc0 20.20.20.5/32 port 80 -> 10.0.10.25
port 80</programlisting>
<para>or:</para>
- <programlisting>map dc0 0/32 port 80 -> 10.0.10.25 port
80</programlisting>
+ <programlisting>rdr dc0 0/0 port 80 -> 10.0.10.25 port
80</programlisting>
<para>or for a LAN DNS Server on LAN address of <hostid
role="ipaddr">10.0.10.33</hostid> that needs to receive
public DNS requests:</para>
- <programlisting>map dc0 20.20.20.5/32 port 53 -> 10.0.10.33
port 53 udp</programlisting>
+ <programlisting>rdr dc0 20.20.20.5/32 port 53 -> 10.0.10.33
port 53 udp</programlisting>
</sect2>
<sect2>
--
Thanks,
Josh Paetzel