diff options
author | darrenr <darrenr@FreeBSD.org> | 2002-04-25 03:34:26 +0000 |
---|---|---|
committer | darrenr <darrenr@FreeBSD.org> | 2002-04-25 03:34:26 +0000 |
commit | e783fd269eb5c7968420f90776437412625caf50 (patch) | |
tree | 916878647b77c97c00dbc302c03bceb1680aa52a /contrib/ipfilter/man | |
parent | aa253ab58590afa73cf198c524f0255f45700d8b (diff) | |
parent | 49c8a23224d88e6d6d3be39c5024f4a7ba105108 (diff) | |
download | FreeBSD-src-e783fd269eb5c7968420f90776437412625caf50.zip FreeBSD-src-e783fd269eb5c7968420f90776437412625caf50.tar.gz |
This commit was generated by cvs2svn to compensate for changes in r95419,
which included commits to RCS files with non-trunk default branches.
Diffstat (limited to 'contrib/ipfilter/man')
-rw-r--r-- | contrib/ipfilter/man/ipnat.5 | 9 |
1 files changed, 7 insertions, 2 deletions
diff --git a/contrib/ipfilter/man/ipnat.5 b/contrib/ipfilter/man/ipnat.5 index 7fb2e90..16c1752 100644 --- a/contrib/ipfilter/man/ipnat.5 +++ b/contrib/ipfilter/man/ipnat.5 @@ -7,8 +7,8 @@ The format for files accepted by ipnat is described by the following grammar: .nf ipmap :: = mapblock | redir | map . -map ::= mapit ifname ipmask "->" ipmask [ mapport ] . -map ::= mapit ifname fromto "->" ipmask [ mapport ] . +map ::= mapit ifname ipmask "->" dstipmask [ mapport ] . +map ::= mapit ifname fromto "->" dstipmask [ mapport ] . mapblock ::= "map-block" ifname ipmask "->" ipmask [ ports ] . redir ::= "rdr" ifname ipmask dport "->" ip [ "," ip ] rdrport options . @@ -18,6 +18,7 @@ rdrport ::= "port" portnum . mapit ::= "map" | "bimap" . fromto ::= "from" object "to" object . ipmask ::= ip "/" bits | ip "/" mask | ip "netmask" mask . +dstipmask ::= ipmask | "range" ip "-" ip . mapport ::= "portmap" tcpudp portnumber ":" portnumber . options ::= [ tcpudp ] [ rr ] . @@ -34,6 +35,10 @@ ifname ::= 'A' - 'Z' { 'A' - 'Z' } numbers . numbers ::= '0' | '1' | '2' | '3' | '4' | '5' | '6' | '7' | '8' | '9' . .fi .PP +In addition to this, # is used to mark the start of a comment and may +appear at the end of a line with a NAT rule (as described above) or on its +own lines. Blank lines are ignored. +.PP For standard NAT functionality, a rule should start with \fBmap\fP and then proceeds to specify the interface for which outgoing packets will have their source address rewritten. |