On 5/8/09 1:24 PM, Karl-Heinz Wild wrote:
Hi,
This seems to me not valid.
from pf.conf(5) :
Ranges of addresses are specified by using the `-' operator. For
instance: ``10.1.1.10 - 10.1.1.12'' means all addresses from 10.1.1.10
to 10.1.1.12, hence addresses 10.1.1.10, 10.1.1.11, and 10.1.1.12.
You can check with
with first lan it works:
@0 nat on bnx0 inet from 192.168.20.1 - 192.168.20.10 to any ->
xxx.yyy.zzz.1
[ Evaluations: 45772 Packets: 73607 Bytes: 55360324
States: 293 ]
[ Inserted: uid 0 pid 12206 State Creations: 2359 ]
@1 nat on bnx0 inet from 192.168.20.11 - 192.168.20.20 to any ->
xxx.yyy.zzz.2
[ Evaluations: 35350 Packets: 31082 Bytes: 21419423
States: 299 ]
[ Inserted: uid 0 pid 12206 State Creations: 2787 ]
@2 nat on bnx0 inet from 192.168.20.21 - 192.168.20.30 to any ->
xxx.yyy.zzz.3
[ Evaluations: 27629 Packets: 772 Bytes: 143711
States: 25 ]
[ Inserted: uid 0 pid 12206 State Creations: 225 ]
@3 nat on bnx0 inet from 192.168.20.31 - 192.168.20.40 to any ->
xxx.yyy.zzz.4
[ Evaluations: 25463 Packets: 41233 Bytes: 29462072
States: 208 ]
[ Inserted: uid 0 pid 12206 State Creations: 2249 ]
Second LAN:
@26 nat on bnx0 inet from 192.168.21.11 - 192.168.21.20 to any ->
xxx.yyy.zzz.27
[ Evaluations: 20 Packets: 0 Bytes: 0
States: 0 ]
[ Inserted: uid 0 pid 12206 State Creations: 0 ]
--
Cristiano Deana - FreeCRIS
"Ho iniziato a usare FreeBSD perche' m$ usava me. ed e' spiacevole"