i want to allow a ip range to a red interface without nating in ip cop. and also accept packets from remote address.