Secure Computing SG300 User Manual page 162

Outgoing Interface
Source Address
Destination Address
Services
The next fields describe how matching packets should be altered.
To Source Address
To Source Ports
Note
When adding a rule, you may either use Predefined addresses or services that have
been added under Definitions, or click New to manually enter an address or service.
Firewall
Enter the interface that the packet to masquerade
behind, typically Internet.
Enter the address from which the request
originated, typically be a private address on the LAN
or DMZ.
Enter the destination address of the request.
Enter the destination service port or ports of the
request.
Enter the address to replace the Source Address.
This is typically a public address of the SnapGear
unit, i.e. Internet or Outgoing Interface Address
This is the translated source port of the packet. If
you leave this blank. Then the port will normally be
unchanged, but may be translated to any source
port if required. You cannot translate the port for IP
protocols or ICMP messages. You should normally
leave this field empty.
You cannot translate the source port if Services is
set to a predefined service. This is because a
predefined service may contain multiple protocols,
and so a single port definition is not well defined.
156