On 5/8/09 1:24 PM, Karl-Heinz Wild wrote:

Hi,

This seems to me not valid.

from pf.conf(5) :

Ranges of addresses are specified by using the `-' operator. For instance: ``10.1.1.10 - 10.1.1.12'' means all addresses from 10.1.1.10 to 10.1.1.12, hence addresses 10.1.1.10, 10.1.1.11, and 10.1.1.12.

You can check with

with first lan it works:

@0 nat on bnx0 inet from 192.168.20.1 - 192.168.20.10 to any -> xxx.yyy.zzz.1 [ Evaluations: 45772 Packets: 73607 Bytes: 55360324 States: 293 ]
  [ Inserted: uid 0 pid 12206 State Creations: 2359  ]
@1 nat on bnx0 inet from 192.168.20.11 - 192.168.20.20 to any -> xxx.yyy.zzz.2 [ Evaluations: 35350 Packets: 31082 Bytes: 21419423 States: 299 ]
  [ Inserted: uid 0 pid 12206 State Creations: 2787  ]
@2 nat on bnx0 inet from 192.168.20.21 - 192.168.20.30 to any -> xxx.yyy.zzz.3 [ Evaluations: 27629 Packets: 772 Bytes: 143711 States: 25 ]
  [ Inserted: uid 0 pid 12206 State Creations: 225   ]
@3 nat on bnx0 inet from 192.168.20.31 - 192.168.20.40 to any -> xxx.yyy.zzz.4 [ Evaluations: 25463 Packets: 41233 Bytes: 29462072 States: 208 ]
  [ Inserted: uid 0 pid 12206 State Creations: 2249  ]

Second LAN:

@26 nat on bnx0 inet from 192.168.21.11 - 192.168.21.20 to any -> xxx.yyy.zzz.27 [ Evaluations: 20 Packets: 0 Bytes: 0 States: 0 ]
  [ Inserted: uid 0 pid 12206 State Creations: 0     ]

--
Cristiano Deana - FreeCRIS
"Ho iniziato a usare FreeBSD perche' m$ usava me. ed e' spiacevole"

Reply via email to