[j-nsp] destination nat, 8 rule limit

[Christopher M. Hobbs]

If I try to set up more than 8 rules per rule-set on our
SRX240 boxes, Junos gets cranky.  Here's the error I
receive:

---
chobbs at SS0101# commit check 
[edit security nat destination rule-set mail]
  'rule'
    number of elements exceeds limit of 8
error: configuration check-out failed: (number of elements exceeds limit)
---

I can't break our rules out into different rule sets because
it complains of context at that point (which I believe is
tied to the destination address?):

---
chobbs at SS0101# commit check 
error: Destination NAT rule-set mail and test have same
context.
[edit security nat destination]
  'rule-set test'
    Destination NAT rule-set(test) sanity check failed.
error: configuration check-out failed
---

All of our incoming addresses exist on the same subnet and
the majority of our destination addresses are on the same
subnet as well, so I clearly can't split up our rules to
work around this issue if the context is based on either the
incoming or destination addresses.

I've read a couple of threads concerning a similar issue and
the fix was to upgrade to 9.6, which I did.  The upgrade
didn't appear to solve anything at all.

Does anyone know why this restriction is here other than
just poor programming?  How can I get past this limitation?

Thanks for your time!
-- 
C.M. Hobbs, http://altbit.org
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 197 bytes
Desc: not available
URL: <https://puck.nether.net/pipermail/juniper-nsp/attachments/20091103/49f1dd42/attachment.bin>