1 #!/sbin/ipnat -f - 2 # 3 # THIS EXAMPLE IS WRITTEN FOR IP FILTER 3.3 4 # 5 # ppp0 - (external) PPP connection to ISP, address a.b.c.d/32 6 # 7 # ed0 - (internal) network interface, address w.x.y.z/32 8 # 9 # If we have only 1 valid IP address from our ISP, then we do this: 10 # 11 # To make ftp work, using the internal ftp proxy, use: 12 # 13 map ppp0 w.x.y.z/24 -> a.b.c.d/32 proxy port ftp ftp/tcp 14 # 15 # For normal TCP/UDP and other IP protocols 16 # 17 map ppp0 w.x.y.z/24 -> a.b.c.d/32 portmap tcp/udp 40000:60000 18 map ppp0 w.x.y.z/24 -> a.b.c.d/32 19 # 20 # if we get a different dialup IP address each time, then we would use: 21 # 22 #map ppp0 w.x.y.z/24 -> 0/32 portmap tcp/udp 40000:60000 23 #map ppp0 w.x.y.z/24 -> 0/32 24 # 25 # If we have a class C address space of valid IP#'s from our ISP, then we can 26 # do this: 27 # 28 #map ppp0 w.x.y.z/24 -> a.b.c.d/24 portmap tcp/udp 40000:60000 29 #map ppp0 w.x.y.z/24 -> a.b.c.d/24 30 # 31 # or, if we only have a small number of PC's, this: 32 # 33 #map ppp0 w.x.y.v/32 -> a.b.c.E/32 portmap tcp/udp 40000:60000 34 #map ppp0 w.x.y.v/32 -> a.b.c.E/32 35 #map ppp0 w.x.y.u/32 -> a.b.c.F/32 portmap tcp/udp 40000:60000 36 #map ppp0 w.x.y.u/32 -> a.b.c.F/32 37 #map ppp0 w.x.y.t/32 -> a.b.c.G/32 portmap tcp/udp 40000:60000 38 #map ppp0 w.x.y.t/32 -> a.b.c.G/32 39 #map ppp0 w.x.y.s/32 -> a.b.c.H/32 portmap tcp/udp 40000:60000 40 #map ppp0 w.x.y.s/32 -> a.b.c.H/32 41 #map ppp0 w.x.y.r/32 -> a.b.c.I/32 portmap tcp/udp 40000:60000 42 #map ppp0 w.x.y.r/32 -> a.b.c.I/32 43 #map ppp0 w.x.y.q/32 -> a.b.c.J/32 portmap tcp/udp 40000:60000 44 #map ppp0 w.x.y.q/32 -> a.b.c.J/32 45 #map ppp0 w.x.y.p/32 -> a.b.c.K/32 portmap tcp/udp 40000:60000 46 #map ppp0 w.x.y.p/32 -> a.b.c.K/32 47