docs/77131: Fix a error in the firewall section (0.32 -> 0/32)
Brad Davis
so14k at so14k.com
Sat Feb 5 12:40:24 UTC 2005
>Number: 77131
>Category: docs
>Synopsis: Fix a error in the firewall section (0.32 -> 0/32)
>Confidential: no
>Severity: serious
>Priority: low
>Responsible: freebsd-doc
>State: open
>Quarter:
>Keywords:
>Date-Required:
>Class: doc-bug
>Submitter-Id: current-users
>Arrival-Date: Sat Feb 05 12:40:23 GMT 2005
>Closed-Date:
>Last-Modified:
>Originator: Brad Davis
>Release: FreeBSD 4.10-STABLE i386
>Organization:
>Environment:
System: FreeBSD mccaffrey.house.so14k.com 4.10-STABLE FreeBSD 4.10-STABLE #0: Fri May 28 08:02:41 MDT 2004 root at mccaffrey.house.so14k.com:/usr/obj/usr/src/sys/MCCAFFREY i386
>Description:
1. Fix an error that I introduced with this firewall chapter. See:
http://lists.freebsd.org/pipermail/freebsd-doc/2005-February/007060.html
http://www.obfuscation.org/ipf/ipf-howto.txt
>How-To-Repeat:
>Fix:
--- doc-ori/en_US.ISO8859-1/books/handbook/firewalls/chapter.sgml Sat Feb 5 05:24:00 2005
+++ doc/en_US.ISO8859-1/books/handbook/firewalls/chapter.sgml Sat Feb 5 05:24:46 2005
@@ -1547,7 +1547,7 @@
role="ipaddr">192.168.1.0/24</hostid>.</para>
<para>The <replaceable>PUBLIC_ADDRESS</replaceable> can either
- be the external IP address or the special keyword `0.32',
+ be the external IP address or the special keyword `0/32',
which means to use the IP address assigned to
<replaceable>IF</replaceable>.</para>
</sect2>
@@ -1567,7 +1567,7 @@
range specified to the left of the arrow symbol on the
<acronym>NAT</acronym> rule. On a match the packet has its
source IP address rewritten with the public IP address
- obtained by the `0.32' keyword. <acronym>NAT</acronym> posts a
+ obtained by the `0/32' keyword. <acronym>NAT</acronym> posts a
entry in its internal <acronym>NAT</acronym> table so when the
packet returns from the public Internet it can be mapped back
to its original private IP address and then passed to the
@@ -1614,7 +1614,7 @@
with a <programlisting> tag ?-->
<para>A normal NAT rule would look like:</para>
- <programlisting>map dc0 192.168.1.0/24 -> 0.32</programlisting>
+ <programlisting>map dc0 192.168.1.0/24 -> 0/32</programlisting>
<para>In the above rule the packet's source port is unchanged
as the packet passes through IP<acronym>NAT</acronym>. By
@@ -1624,13 +1624,13 @@
IP<acronym>NAT</acronym> to modify the source port to be
within that range:</para>
- <programlisting>map dc0 192.168.1.0/24 -> 0.32 portmap tcp/udp 20000:60000</programlisting>
+ <programlisting>map dc0 192.168.1.0/24 -> 0/32 portmap tcp/udp 20000:60000</programlisting>
<para>Additionally we can make things even easier by using the
<literal>auto</literal> keyword to tell IP<acronym>NAT</acronym> to determine
by itself which ports are available to use:</para>
- <programlisting>map dc0 192.168.1.0/24 -> 0.32 portmap tcp/udp auto</programlisting>
+ <programlisting>map dc0 192.168.1.0/24 -> 0/32 portmap tcp/udp auto</programlisting>
</sect3>
<sect3>
>Release-Note:
>Audit-Trail:
>Unformatted:
More information about the freebsd-doc
mailing list