20.16.9.3. Setting a port masquerading range

In cases where you want to set the port masquerading range, the port can be set as follows:

<forward mode='nat'>
   <address start='192.0.2.1' end='192.0.2.10'/>
</forward>  ...

These values should be set using the iptables commands as shown in Section 18.3, “Network Address Translation Mode”