Manual Pages for UNIX Operating System command usage for man ipnat

System Administration Commands                          ipnat(1M)



NAME
     ipnat - user interface to the NAT subsystem

SYNOPSIS
     ipnat [-CdFhlnRrsv] -f filename


DESCRIPTION
     The ipnat utility opens a  specified  file  (treating  -  as
     stdin) and parses it for a set of rules that are to be added
     or removed from the IP NAT.


     If there are no parsing problems,  each  rule  processed  by
     ipnat  is  added  to  the kernel's internal lists. Rules are
     appended to the internal lists, matching the order in  which
     they appear when given to ipnat.


     ipnat's use is restricted  through  access  to  /dev/ipauth,
     /dev/ipl, and /dev/ipstate. The default permissions of these
     files require ipnat to be run as root for all operations.


     ipnat's use is restricted through access to /dev/ipnat.  The
     default permissions of /dev/ipnat require ipnat to be run as
     root for all operations.

OPTIONS
     The following options are supported:

     -C             Delete all entries in the  current  NAT  rule
                    listing (NAT rules).


     -d             Turn debug mode on.  Causes  a  hex  dump  of
                    filter  rules to be generated as it processes
                    each one.


     -F             Delete all active entries in the current  NAT
                    translation  table (currently active NAT map-
                    pings).


     -f filename    Parse specified file for rules to be added or
                    removed  from  the  IP  NAT.  filename can be
                    stdin.


     -h             Print number of hits  for  each  MAP/Redirect
                    filter.



SunOS 5.11           Last change: 3 Apr 2008                    1






System Administration Commands                          ipnat(1M)



     -l             Show the list of current NAT table entry map-
                    pings.


     -n             Prevents ipf from  doing  anything,  such  as
                    making  ioctl  calls,  which  might alter the
                    currently running kernel.


     -R             Disable both IP  address-to-hostname  resolu-
                    tion  and port number-to-service name resolu-
                    tion.


     -r             Remove matching NAT  rules  rather  than  add
                    them to the internal lists.


     -s             Retrieve and display NAT statistics.


     -v             Turn verbose mode  on.  Displays  information
                    relating   to   rule  processing  and  active
                    rules/table entries.


FILES
     /dev/ipnat

         Link to IP Filter pseudo device.


     /dev/kmem

         Special file that provides  access  to  virtual  address
         space.


     /etc/ipf/ipnat.conf

         Location of ipnat startup configuration file.


     /usr/share/ipfilter/examples/

         Contains numerous IP Filter examples.


ATTRIBUTES
     See attributes(5) for descriptions of the  following  attri-
     butes:




SunOS 5.11           Last change: 3 Apr 2008                    2






System Administration Commands                          ipnat(1M)



     ____________________________________________________________
    |       ATTRIBUTE TYPE        |       ATTRIBUTE VALUE       |
    |_____________________________|_____________________________|
    | Availability                | network/ipfilter            |
    |_____________________________|_____________________________|
    | Interface Stability         | Committed                   |
    |_____________________________|_____________________________|


SEE ALSO
     ipf(1M), ipfstat(1M), ipnat(4), attributes(5)












































SunOS 5.11           Last change: 3 Apr 2008                    3