I am using
ipfw nat with the following config
ipfw -q nat 1 config if em0
Which TCP and UDP ranges will the NAT choose its alias ports from? I would like it to be always from the range 49152–65535, so that I can do:
add allow tcp from any to me 22 add allow tcp from any to me 80 add deny tcp from any to me 1-49151 add nat 1 tcp from any to me recv em0 established
ipfw support this easily? If not, is there some way I can enforce this behaviour?