> And now only 192.168.40.5 can use that port forward. Am I > misunderstanding what you were saying? I understand how it isn't > possible to restrict based on the original destination port
Yes that's what I meant - you can't restrict source IPs in connection with original destination port. As soon as a source IP is allowed, it can access on any WAN port for which there is a NAT rule, so you can't force certain source IPs to use certain WAN ports only. Perhaps not major, but I don't like it. Volker -- Volker Kuhlmann is list0570 with the domain in header http://volker.dnsalias.net/ Please do not CC list postings to me. --------------------------------------------------------------------- To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
