122514Sdarrenr# map all tcp connections from 10.1.0.0/16 to 240.1.0.1, changing the source
222514Sdarrenr# port number to something between 10,000 and 20,000 inclusive.  For all other
322514Sdarrenr# IP packets, allocate an IP # between 240.1.0.0 and 240.1.0.255, temporarily
422514Sdarrenr# for each new user.
522514Sdarrenr#
622514Sdarrenrmap ed1 10.1.0.0/16 -> 240.1.0.1/32 portmap tcp 10000:20000
722514Sdarrenrmap ed1 10.1.0.0/16 -> 240.1.0.0/24
822514Sdarrenr#
922514Sdarrenr# Redirection is triggered for input packets.
1022514Sdarrenr# For example, to redirect FTP connections through this box, to the local ftp
1122514Sdarrenr# port, forcing them to connect through a proxy, you would use:
1222514Sdarrenr#
1322514Sdarrenrrdr ed0 0.0.0.0/0 port ftp -> 127.0.0.1 port ftp
1422514Sdarrenr#
15