{"id":988,"date":"2010-11-03T17:32:07","date_gmt":"2010-11-03T17:32:07","guid":{"rendered":"http:\/\/wiki.freeiz.com\/?p=988"},"modified":"2016-08-09T12:04:52","modified_gmt":"2016-08-09T12:04:52","slug":"firebrick-address-mapping-guide","status":"publish","type":"post","link":"https:\/\/wiki-see.info\/wp\/2010\/11\/03\/firebrick-address-mapping-guide\/","title":{"rendered":"FireBrick Address Mapping Guide"},"content":{"rendered":"<h1>Address mapping<\/h1>\n<p>Address mapping allows a change to be made to the ports and IP addresses of traffic going via the FireBrick. This is the same principle as NAT, but allows more specific changes to be made. All new sessions are put through the address mapping table, and the first applicable entries is used.<\/p>\n<table border=\"1\" cellspacing=\"2\" cellpadding=\"2\">\n<tbody>\n<tr>\n<td>Name<\/td>\n<td>Allows you to give a name to this rule<\/td>\n<\/tr>\n<tr>\n<td>Security<\/td>\n<td>Sets the security level of this rule and so defines who can view or edit the users details<\/td>\n<\/tr>\n<tr>\n<td>Profile<\/td>\n<td>Defines the profile when this rule applies<\/td>\n<\/tr>\n<tr>\n<td>Source<\/td>\n<td>This allows you to specify one or more source interfaces from which the traffic comes from<\/td>\n<\/tr>\n<tr>\n<td>Target<\/td>\n<td>This allows you to specify one of more target interfaces to which the traffic was originally being sent (after any routing)<\/td>\n<\/tr>\n<tr>\n<td>Map traffic to<\/td>\n<td>This defines the new interface to which the traffic is to be sent<\/td>\n<\/tr>\n<tr>\n<td>Weight<\/td>\n<td>For advanced use<\/td>\n<\/tr>\n<tr>\n<td>Source ports<\/td>\n<td>This allows a range of source ports to be specified. Applicable to TCP and UDP. Normally blank meaning any.<\/td>\n<\/tr>\n<tr>\n<td>Target ports<\/td>\n<td>This allows a range of target ports to be specifiied. Applicable to TCP and UDP. Typically just one port for the specific protocol, e.g. 80 for WWW<\/td>\n<\/tr>\n<tr>\n<td>Protocol<\/td>\n<td>This allows the specific protocol to be specified, or Any.<\/td>\n<\/tr>\n<tr>\n<td>Port group<\/td>\n<td>Instead of using a source port range, target port range and protocol, then a named port group can be selected.<\/td>\n<\/tr>\n<tr>\n<td>Source IP range<\/td>\n<td>Allows the range of source IPs to be specified, or blank for any.<\/td>\n<\/tr>\n<tr>\n<td>Source IP group<\/td>\n<td>Instead of an IP range, a named IP group can be selected.<\/td>\n<\/tr>\n<tr>\n<td>Target IP range<\/td>\n<td>Allows the range of target IPs to be specified, or blank for any.<\/td>\n<\/tr>\n<tr>\n<td>Target IP group<\/td>\n<td>Instead of an IP range, a named IP group can be selected.<\/td>\n<\/tr>\n<tr>\n<td>New target port<\/td>\n<td>This allows the target port to be changed. Leave blank for no change<\/td>\n<\/tr>\n<tr>\n<td>New source IP<\/td>\n<td>This allows the source IP to be changed. Leave blank for no change. Set to 255.255.255.255 to cause NAT.<\/td>\n<\/tr>\n<tr>\n<td>New target IP<\/td>\n<td>This allows the target IP to be changed.<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<h2><a name=\"1\"><\/a>Technical Reference<\/h2>\n<ul>\n<li>Both stealth and routed traffic is considered, and any mapped traffic becomes routed.<\/li>\n<li>Filters are applied before the traffic is mapped<\/li>\n<li>If a mapping rule matches, then routing is re-done with the new target IP, ports, etc.<\/li>\n<li>Speed lanes are applied to the pre-mapped IP and ports, but the mapped target interface<\/li>\n<li>If there is mapping entry the the routing table is reconsidered<\/li>\n<li>If a target IP range is specified (not an IP group) then the new target IP defines the value mapped for the first of the target range specified. The next is the new IP plus one and so on. i.e. a block of target IPs is remapped to a blank of new IPs. If this is not required then use an IP group to specifyc the range.<\/li>\n<li>Setting the new interface to a partial interface, e.g. just WAN with no subnet selected, will restrict the routing rules considered to be on that interface.<\/li>\n<li>Setting the new interface to Any will allow the routing rules to decide the new target interface<\/li>\n<li>Setting the new source IP to 255.255.255.255 causes the FireBrick to use NAT, using an IP appropriate for the subnet on which is eventually sends the packet.<\/li>\n<li>See <a href=\"http:\/\/www.firebrick.co.uk\/1740\/manuals\/weighted.html\">Weighted rules<\/a> for details on how to use the Weight option. This applies only with the bonding feature.<\/li>\n<\/ul>\n","protected":false},"excerpt":{"rendered":"<p>Address mapping Address mapping allows a change to be made to the ports and IP addresses of traffic going via the FireBrick. This is the same principle as NAT, but allows more specific changes to be made. All new sessions are put through the address mapping table, and the first applicable entries is used. Name [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[5],"tags":[284,288],"class_list":["post-988","post","type-post","status-publish","format-standard","hentry","category-firebrick","tag-firebrick","tag-firebrick-mapping"],"_links":{"self":[{"href":"https:\/\/wiki-see.info\/wp\/wp-json\/wp\/v2\/posts\/988","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/wiki-see.info\/wp\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/wiki-see.info\/wp\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/wiki-see.info\/wp\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/wiki-see.info\/wp\/wp-json\/wp\/v2\/comments?post=988"}],"version-history":[{"count":1,"href":"https:\/\/wiki-see.info\/wp\/wp-json\/wp\/v2\/posts\/988\/revisions"}],"predecessor-version":[{"id":4810,"href":"https:\/\/wiki-see.info\/wp\/wp-json\/wp\/v2\/posts\/988\/revisions\/4810"}],"wp:attachment":[{"href":"https:\/\/wiki-see.info\/wp\/wp-json\/wp\/v2\/media?parent=988"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/wiki-see.info\/wp\/wp-json\/wp\/v2\/categories?post=988"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/wiki-see.info\/wp\/wp-json\/wp\/v2\/tags?post=988"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}