On Fri, Dec 19, 2003 at 10:10:44AM -0500, Daniel Staal wrote: > --As off Friday, December 19, 2003 12:43 PM +0100, Henning Brauer is > alleged to have said: > > >>Suggestions: re-address 192.168.100.130 to, say, 192.168.101.130 > >>or change $IntNet to exclude it. (While keeping the rest of your > >>network, of course.) > > > >why so complicated? > >you can just block them on the internal interface. > >or use tags. or or or.. > > --As for the rest, it is mine. > > Blocking them on the internal interface won't work: they've already > been nat'ed.
huh? why would you NAT on the internal interface? well, admitted, I never use NAT, but...;2C > Tags I've never used, and didn't think of, but is the > best option. of course ;-) -- Henning Brauer, BS Web Services, http://bsws.de [EMAIL PROTECTED] - [EMAIL PROTECTED] Unix is very simple, but it takes a genius to understand the simplicity. (Dennis Ritchie)
