On Sun, 17 Nov 2002, Matijs wrote: > So I should use any or mention both the external AND the internal?
No. > It seems > to me that if I block everything coming in on the external interface no > package should ever come through. Yes. NAT (rdr) goes first. Then you allow the internal _adress_ in on the external _interface_. -- Cam
