Nat

• NAT is handled by a different program: ipnat

• Used both for rule handling and statistics

• Basic syntax for NAT rules:

• map = mapit ifname fromto "->" ipmask

• mapit = "map" | "bimap"

• ifname = name of interface

• ipmask = either same as for filter rules, but mask is mandatory | "range" ipaddr "-" ipaddr

• fromto = ipmask | "from" object "to" object

• object = addr [port-comp | portrange]

Notes: