From owner-freebsd-doc@FreeBSD.ORG Tue Jan 9 01:24:51 2007 Return-Path: X-Original-To: doc@FreeBSD.org Delivered-To: freebsd-doc@FreeBSD.ORG Received: from mx1.freebsd.org (mx1.freebsd.org [69.147.83.52]) by hub.freebsd.org (Postfix) with ESMTP id 9D24516A415 for ; Tue, 9 Jan 2007 01:24:51 +0000 (UTC) (envelope-from msoulier@gmail.com) Received: from nf-out-0910.google.com (nf-out-0910.google.com [64.233.182.189]) by mx1.freebsd.org (Postfix) with ESMTP id 3786613C45A for ; Tue, 9 Jan 2007 01:24:50 +0000 (UTC) (envelope-from msoulier@gmail.com) Received: by nf-out-0910.google.com with SMTP id k27so239613nfc for ; Mon, 08 Jan 2007 17:24:50 -0800 (PST) DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=beta; d=gmail.com; h=received:message-id:date:from:sender:to:subject:mime-version:content-type:content-transfer-encoding:content-disposition:x-google-sender-auth; b=SRc9kgzZ5Grx6c49hasX7K5DiZNJIEr0I2oiCOsK538jq//U+OlXuLVFUaDW0jtKrj7hXnaU1wqCAa6/dR7jV0Go5cR7uzMXcefiidx9GG1quNxs26K4QVmeiUkV1EYL2YGtP1yFIXeCTxHc7HKl0lyuci5B11ob683tMWXOzuo= Received: by 10.82.113.6 with SMTP id l6mr2898229buc.1168304173308; Mon, 08 Jan 2007 16:56:13 -0800 (PST) Received: by 10.82.170.18 with HTTP; Mon, 8 Jan 2007 16:56:13 -0800 (PST) Message-ID: Date: Mon, 8 Jan 2007 19:56:13 -0500 From: "Michael P. Soulier" Sender: msoulier@gmail.com To: doc@FreeBSD.org MIME-Version: 1.0 Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Content-Disposition: inline X-Google-Sender-Auth: e3d1cb3509ad0229 Cc: Subject: ipnat rdr example broken X-BeenThere: freebsd-doc@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Documentation project List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 09 Jan 2007 01:24:51 -0000 Hello, I'm reading http://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/firewalls-ipf.html. The examples for ipnat rdr rules look like so rdr dc0 0/32 port 80 -> 10.0.10.25 port 80 But as I found out the hard way, this doesn't work. The 0/32 syntax is wrong, it should be 0.0.0.0/0. Thanks, Mike -- Michael P. Soulier "Any intelligent fool can make things bigger and more complex... It takes a touch of genius - and a lot of courage to move in the opposite direction." --Albert Einstein