On 2012-07-09 10:17, Stuart Henderson wrote:
On 2012-07-09, Fil DiNoto<fdin...@gmail.com>  wrote:
But i was wondering if I could achieve something that would work for
ALL the addresses behind the router as well without creating
individual rules for each address. Something like this:

pass in on egress proto tcp from $location1 to any port ssh rdr-to
(original destination IP) port XXX22

nope. easiest option for this is probably a userland proxy.
not sure but I reckon relayd can probably do it.

Not even with a bitmask pool?

pass ... rdr-to 0.0.0.0/0 port XXX22 bitmask

Simon

Reply via email to