As I am a newbie, how actually do I do this? And, how do I make sure that ougoing packets to the Internet get PAT applied via the WAN NIC? (But it doesn't effect incoming packets?
This is an internal firewall that is going to be used to protect a higher classified network. The WAN connection will have a default gateway of the outside firewall (inside NIC) Ta Paul From: William Salt [mailto:[email protected]] Sent: Saturday, July 02, 2011 01:51 PM To: [email protected] <[email protected]> Subject: Re: [pfSense Support] NAT Exempt You want to turn NAT off, turn NAT to manual, then delete the rules. :) On Jul 2, 2011 1:10 PM, "Paul Rose" <[email protected]<mailto:[email protected]>> wrote: > > I have an internal (LAN) IP address of 10.2.67.11 and an external (WAN) IP of > 10.2.66.15 > > What is the best way to ensure that I do not NAT packets from 10.2.66.15 to > 10.2.67.11 but still retaining a firewall > > Is there a "How to" of how I would achieve this > > I am running PFSense RC2 (latest update) > > > Paul Rose > Director > Email:[email protected]<mailto:email%[email protected]> > > 76 Cannon Street > London > EC4N 6AE > Tel: 020 7213 0923 > Fax: 020 7213 0990 > Mobile: 07970 482038 > Web: http://www.cnsuk.co.uk > > > > > ----------------------------- > This message (and any associated files) is intended only for the use of the > individual or entity to which it is addressed and may contain information > that is confidential, subject to copyright or constitutes a trade secret. If > you are not the intended recipient you are hereby notified that any > dissemination, copying or distribution of this message, or files associated > with this message, is strictly prohibited. If you have received this message > in error, please notify us immediately by replying to the message and > deleting it from your computer. Messages sent to and from us may be monitored. > > Internet communications cannot be guaranteed to be secure or error-free as > information could be intercepted, corrupted, lost, destroyed, arrive late or > incomplete, or contain viruses. Therefore, we do not accept responsibility > for any errors or omissions that are present in this message, or any > attachment, that have arisen as a result of e-mail transmission. If > verification is required, please request a hard-copy version. Any views or > opinions presented are solely those of the author and do not necessarily > represent those of the company. > ----------------------------- > > > --------------------------------------------------------------------- > To unsubscribe, e-mail: > [email protected]<mailto:[email protected]> > For additional commands, e-mail: > [email protected]<mailto:[email protected]> > > Commercial support available - https://portal.pfsense.org >
