Elio Tondo wrote: > > I have two machines in the loc zone with a static NAT: > > #EXTERNAL INTERFACE INTERNAL ALL LOCAL > # INTERFACES > xxx.xxx.xxx.254 eth0 192.168.10.5 No No > xxx.xxx.xxx.247 eth0 192.168.10.60 No No > > and in the masq file: > > #INTERFACE SUBNET ADDRESS PROTO PORT(S) IPSEC > eth0 eth1!192.158.10.5,192.158.10.60 > > (masquerading for all machines in loc except for the two with static NAT).
Which is totally unnecessary -- static nat is applied before masquerade. -Tom -- Tom Eastep \ Nothing is foolproof to a sufficiently talented fool Shoreline, \ http://shorewall.net Washington USA \ [EMAIL PROTECTED] PGP Public Key \ https://lists.shorewall.net/teastep.pgp.key
signature.asc
Description: OpenPGP digital signature
------------------------------------------------------------------------- Take Surveys. Earn Cash. Influence the Future of IT Join SourceForge.net's Techsay panel and you'll get the chance to share your opinions on IT & business topics through brief surveys -- and earn cash http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV
_______________________________________________ Shorewall-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/shorewall-users
