Shorewall users - Feb 2004 - Static nat on an entire inet class

Hello,

I''ve setup a static on a C Class (192.168.10.0/24 ->
192.168.50.0/24).

To do that, I have added 254 (One per IP) lines to the 
/etc/shorewall/nat file.

Does someone knows a better way to do that ?

Thanks,

Jerome.


--
Jérôme RICHARD - Virtual Net
mailto:jrichard@virtual-net.fr
tél.  : 02.23.21.06.30 (Rennes)
tél.  : 02.51.12.23.44 (Nantes)
tél.  : 06.03.67.12.79 (Mobile)

On Thursday 19 February 2004 07:35 am, Jerome RICHARD
wrote:
> Hello,
>
> I''ve setup a static on a C Class (192.168.10.0/24 ->
192.168.50.0/24).
>
> To do that, I have added 254 (One per IP) lines to the
> /etc/shorewall/nat file.
>
> Does someone knows a better way to do that ?
>
There''s an extension in Netfilter Patch-O-Matic called NETMAP which
will do
what you want with two iptables commands. You can just place the appropriate 
commands in /etc/shorewall/start.

NETMAP is included in the 2.6 kernels so I will be adding support for in in 
the near future (but not until after Shorewall 2.0 is released).

-Tom
-- 
Tom Eastep    \ Nothing is foolproof to a sufficiently talented fool
Shoreline,     \ http://shorewall.net
Washington USA  \ teastep@shorewall.net