#-----------------------------------------------------------------------------#
#    This file contains sample IP redirection rules.                          #
#                                                                             #
#    To activate the rules, simply move them to firerule.cnf and update the   #
#    attributes to match your setup.                                          #
#                                                                             #
#    DISCLAIMER: Not all samples have been tested by F/X Communications.      #
#-----------------------------------------------------------------------------#



#-----------------------------------------------------------------------------#
#    Forwarding all incoming traffic to an internal server.                   #
#                                                                             #
#    Notice these rules will render NAT useless. The Firewall will act        #
#    as a relay that forwards all packets to an internal PC.                  #
#                                                                             #
#-----------------------------------------------------------------------------#

Redirect-All-In         Comment = "All traffic redirected to 10.1.1.1 (in)",
                        Destination = "my_ip",
                        Rule-Action = Portmap,
                        Mapping-Dest-IP = "10.1.1.1",

Redirect-All-Out        Comment = "All traffic redirected to 10.1.1.1 (out)",
                        Source = "10.1.1.1",
                        Rule-Action = Portmap,


#-----------------------------------------------------------------------------#
#    Forwarding real world IP addresses to internal IP addresses.             #
#                                                                             #
#    Assume a business with 255 real world IP addresses (a Class C). The      #
#    Firewall is likely to accept traffic destined to many of these addresses #
#    and instead of mixing external and internal IP addresses on your network,#
#    the various external IP's can be mapped to internal IP addresses. For    #
#    outgoing packets the process is reversed.                                #
#                                                                             #
#    For example: All incoming traffic to 11.12.13.14 is forwarded to         #
#    10.1.1.1 on the internal net. In the outgoing direction, traffic is      #
#    redirected back to appear to be coming from 11.12.13.14.                 #
#                                                                             #
#-----------------------------------------------------------------------------#

Redirect-Public-In      Comment = "Redirect public IP to internal PC (in)",
                        Destination = "11.12.13.14",
                        Rule-Action = Portmap,
                        Mapping-Dest-IP = "10.1.1.1",

Redirect-Public-Out     Comment = "Redirect public IP to internal PC (out)",
                        Source = "10.1.1.1",
                        Rule-Action = Portmap,
                        Mapping-Dest-IP = "11.12.13.14",
