PF A NAT question on 'port 1024:65535'

[kalleboy]

Hi. In PF rules, could someone explain the differences between;

nat on $ext_if from ($int_if:network) to any -> ($ext_if:0)

and

nat on $ext_if from ($int_if:network) to any -> ($ext_if:0) port 1024:65535

On the second rule, what does port 1024:65535" actually do in terms of NAT?

"$int_if" is my 10.10.10.0/29 network, a virtual ethernet interface with several local IPs and VMs running on the host system.

I got 2 VMs running as web servers and one mail server running on the same machine under virtualization.

And $ext_if is the only physical interface on the host machine with a single public IP address.

In my case, would adding "port 1024:65535" be better for overall NAT?

 

[SirDice]

On the second rule, what does port 1024:65535" actually do in terms of NAT?

It sets or limits the source port used for translated packets.