From owner-freebsd-questions@FreeBSD.ORG  Thu Jul 24 18:12:48 2003
Return-Path: <owner-freebsd-questions@FreeBSD.ORG>
Delivered-To: freebsd-questions@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id 6C97E37B401
	for <freebsd-questions@FreeBSD.ORG>;
	Thu, 24 Jul 2003 18:12:48 -0700 (PDT)
Received: from mta01-svc.ntlworld.com (mta01-svc.ntlworld.com [62.253.162.41])
	by mx1.FreeBSD.org (Postfix) with ESMTP id 513CA43F85
	for <freebsd-questions@FreeBSD.ORG>;
	Thu, 24 Jul 2003 18:12:47 -0700 (PDT)
	(envelope-from matt@overdose.com)
Received: from overdose.com ([80.0.158.31]) by mta01-svc.ntlworld.com
          (InterMail vM.4.01.03.37 201-229-121-137-20020806) with ESMTP
          id <20030725011245.OTDM21249.mta01-svc.ntlworld.com@overdose.com>
          for <freebsd-questions@FreeBSD.ORG>;
          Fri, 25 Jul 2003 02:12:45 +0100
Date: Fri, 25 Jul 2003 02:12:45 +0100
Mime-Version: 1.0 (Apple Message framework v552)
From: Matthew Ryan <matt@overdose.com>
To: freebsd-questions@FreeBSD.ORG
Message-Id: <196DDFF6-BE3D-11D7-9917-0030654886A6@overdose.com>
X-Mailer: Apple Mail (2.552)
Content-Type: text/plain;
	charset=US-ASCII;
	format=flowed
Content-Transfer-Encoding: 7bit
X-Content-Filtered-By: Mailman/MimeDel 2.1.1
Subject: redirect_port
X-BeenThere: freebsd-questions@freebsd.org
X-Mailman-Version: 2.1.1
Precedence: list
List-Id: User questions <freebsd-questions.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>,
	<mailto:freebsd-questions-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-questions>
List-Post: <mailto:freebsd-questions@freebsd.org>
List-Help: <mailto:freebsd-questions-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>,
	<mailto:freebsd-questions-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Fri, 25 Jul 2003 01:12:48 -0000

Hi there,

Using nat on my gateway to forward traffic on many ports the same 
internal machine, what is the correct syntax?

redirect_port x.x.x.x zz zz
redirect_port x.x.x.x yy yy
redirect_port x x x x nn nn

or

redirect_port x.x.x.x zz,yy,nn zz,yy,nn

or with some other separator or what?

Thanks - this is driving me up the wall, the only way I can find is to 
redirect a whole range,

redirect_port xx-nn xx-nn

but some of the ports in the range are insecure so that means I have to 
secure the internal machine which kind of defeats the object of having 
a firewall on my external machine in the first place.

Thanks again

Matthew Ryan

Matt@overdose.com