Steve Welham wrote: > The painless way to do this is with webservers on non-routable > addresses, NAT and two interfaces. Is that out of the question? > > In any case man pf.conf says: > > "Redirections cannot reflect packets back through the interface they > arrive on, they can only be redirected to hosts connected to different > interfaces or to the fire-wall itself."
Does this also apply to binat rules? -Stephen-