User manual

Outgoing Interface Enter the interface that the packet to masquerade
behind, typically Internet.
Source Address Enter the address from which the request
originated, typically be a private address on the LAN
or DMZ.
Destination Address Enter the destination address of the request.
Services Enter the destination service port or ports of the
request.
The next fields describe how matching packets should be altered.
To Source Address Enter the address to replace the Source Address.
This is typically a public address of the SnapGear
unit, i.e. Internet or Outgoing Interface Address
To Source Ports This is the translated source port of the packet. If
you leave this blank. Then the port will normally be
unchanged, but may be translated to any source
port if required. You cannot translate the port for IP
protocols or ICMP messages. You should normally
leave this field empty.
You cannot translate the source port if Services is
set to a predefined service. This is because a
predefined service may contain multiple protocols,
and so a single port definition is not well defined.
Note
When adding a rule, you may either use Predefined addresses or services that have
been added under Definitions, or click New to manually enter an address or service.
156
Firewall