View Single Post
  #1   (View Single Post)  
Old 30th September 2016
bsdsource bsdsource is offline
Port Guard
 
Join Date: Apr 2014
Posts: 34
Default network address translation

I have an xbox and a ps4 that both need static ports (outbound). The following code works fine for just my xbox:

Code:
xbox = "192.168.1.111"
ps4 =  "192.168.1.112"

# Perform source-port randomization for all hosts which are not the xbox
match out log on egress from !$xbox to any nat-to ($ext_if:0) port 1024:65535

# Do not perform source-port randomization for the xbox
match out log on egress from $xbox to any nat-to ($ext_if:0) static-port
I attempted to add my ps4 but it doesn't appear to be working as intended. Here is the code:

Code:
xbox = "192.168.1.111"
ps4 =  "192.168.1.112"

# Perform source-port randomization for all hosts which are not the xbox
match out log on egress from !$xbox to any nat-to ($ext_if:0) port 1024:65535

# Do not perform source-port randomization for the xbox or ps4
match out log on egress from $xbox to any nat-to ($ext_if:0) static-port
match out log on egress from $ps4 to any nat-to ($ext_if:0) static-port
The first match rule not equal to the xbox (!$xbox) I have a question about. Is it possible to add the ps4 to that same line as an "or" statement? Something similar to:

Code:
match out log on egress from {!$xbox || !$ps4} to any nat-to ($ext_if:0) port 1024:65535
If I'm going all wrong with this code can someone provide a solution or suggestion? Thank you.
Reply With Quote