xref: /illumos-gate/usr/src/cmd/ipf/examples/BASIC.NAT (revision 598f4ceed9327d2d6c2325dd67cae3aa06f7fea6)
1#!/sbin/ipnat -f -
2#
3# THIS EXAMPLE IS WRITTEN FOR IP FILTER 3.3
4#
5# ppp0 - (external) PPP connection to ISP, address a.b.c.d/32
6#
7# ed0 - (internal) network interface, address w.x.y.z/32
8#
9# If we have only 1 valid IP address from our ISP, then we do this:
10#
11# To make ftp work, using the internal ftp proxy, use:
12#
13map ppp0 w.x.y.z/24 -> a.b.c.d/32 proxy port ftp ftp/tcp
14#
15# For normal TCP/UDP and other IP protocols
16#
17map ppp0 w.x.y.z/24 -> a.b.c.d/32 portmap tcp/udp 40000:60000
18map ppp0 w.x.y.z/24 -> a.b.c.d/32
19#
20# if we get a different dialup IP address each time, then we would use:
21#
22#map ppp0 w.x.y.z/24 -> 0/32 portmap tcp/udp 40000:60000
23#map ppp0 w.x.y.z/24 -> 0/32
24#
25# If we have a class C address space of valid IP#'s from our ISP, then we can
26# do this:
27#
28#map ppp0 w.x.y.z/24 -> a.b.c.d/24 portmap tcp/udp 40000:60000
29#map ppp0 w.x.y.z/24 -> a.b.c.d/24
30#
31# or, if we only have a small number of PC's, this:
32#
33#map ppp0 w.x.y.v/32 -> a.b.c.E/32 portmap tcp/udp 40000:60000
34#map ppp0 w.x.y.v/32 -> a.b.c.E/32
35#map ppp0 w.x.y.u/32 -> a.b.c.F/32 portmap tcp/udp 40000:60000
36#map ppp0 w.x.y.u/32 -> a.b.c.F/32
37#map ppp0 w.x.y.t/32 -> a.b.c.G/32 portmap tcp/udp 40000:60000
38#map ppp0 w.x.y.t/32 -> a.b.c.G/32
39#map ppp0 w.x.y.s/32 -> a.b.c.H/32 portmap tcp/udp 40000:60000
40#map ppp0 w.x.y.s/32 -> a.b.c.H/32
41#map ppp0 w.x.y.r/32 -> a.b.c.I/32 portmap tcp/udp 40000:60000
42#map ppp0 w.x.y.r/32 -> a.b.c.I/32
43#map ppp0 w.x.y.q/32 -> a.b.c.J/32 portmap tcp/udp 40000:60000
44#map ppp0 w.x.y.q/32 -> a.b.c.J/32
45#map ppp0 w.x.y.p/32 -> a.b.c.K/32 portmap tcp/udp 40000:60000
46#map ppp0 w.x.y.p/32 -> a.b.c.K/32
47