Annotation of src/share/ipf/nat.3, Revision 1.1
1.1 ! kjell 1: #!/sbin/ipnat -f -
! 2: #
! 3: # THIS EXAMPLE IS WRITTEN FOR IP FILTER 3.3
! 4: #
! 5: # ppp0 - (external) PPP connection to ISP, address a.b.c.d/32
! 6: #
! 7: # ed0 - (internal) network interface, address w.x.y.z/32
! 8: #
! 9: # If we have only 1 valid IP address from our ISP, then we do this:
! 10: #
! 11: map ppp0 w.x.y.z/24 -> a.b.c.d/32 portmap tcp/udp 40000:60000
! 12: map ppp0 w.x.y.z/24 -> a.b.c.d/32
! 13: #
! 14: # if we get a different dialup IP address each time, then we would use:
! 15: #
! 16: #map ppp0 w.x.y.z/24 -> 0/32 portmap tcp/udp 40000:60000
! 17: #map ppp0 w.x.y.z/24 -> 0/32
! 18: #
! 19: # If we have a class C address space of valid IP#'s from our ISP, then we can
! 20: # do this:
! 21: #
! 22: #map ppp0 w.x.y.z/24 -> a.b.c.d/24 portmap tcp/udp 40000:60000
! 23: #map ppp0 w.x.y.z/24 -> a.b.c.d/24
! 24: #
! 25: # or, if we only have a small number of PC's, this:
! 26: #
! 27: #map ppp0 w.x.y.v/32 -> a.b.c.E/32 portmap tcp/udp 40000:60000
! 28: #map ppp0 w.x.y.v/32 -> a.b.c.E/32
! 29: #map ppp0 w.x.y.u/32 -> a.b.c.F/32 portmap tcp/udp 40000:60000
! 30: #map ppp0 w.x.y.u/32 -> a.b.c.F/32
! 31: #map ppp0 w.x.y.t/32 -> a.b.c.G/32 portmap tcp/udp 40000:60000
! 32: #map ppp0 w.x.y.t/32 -> a.b.c.G/32
! 33: #map ppp0 w.x.y.s/32 -> a.b.c.H/32 portmap tcp/udp 40000:60000
! 34: #map ppp0 w.x.y.s/32 -> a.b.c.H/32
! 35: #map ppp0 w.x.y.r/32 -> a.b.c.I/32 portmap tcp/udp 40000:60000
! 36: #map ppp0 w.x.y.r/32 -> a.b.c.I/32
! 37: #map ppp0 w.x.y.q/32 -> a.b.c.J/32 portmap tcp/udp 40000:60000
! 38: #map ppp0 w.x.y.q/32 -> a.b.c.J/32
! 39: #map ppp0 w.x.y.p/32 -> a.b.c.K/32 portmap tcp/udp 40000:60000
! 40: #map ppp0 w.x.y.p/32 -> a.b.c.K/32
! 41: #
! 42: # To make ftp work, using the internal ftp proxy, use:
! 43: #
! 44: map ppp0 w.x.y.z/24 -> a.b.c.d/32 proxy port ftp ftp/tcp
! 45: #