On Mon, Jul 14, 2008 at 09:19:22PM -0700, Parvinder Bhasin wrote: > When I try to add the external ips as aliases on my external interface, > it works fine. > > Isn't the BINAT statement sufficient??? do i have to use aliases???
Unless the addresses are being routed to the firewall in question, yes, you have to use aliases. Otherwise your system will not reply to ARP requests for the addresses, and the upstream router will not know where to send the traffic.
