On Tuesday 02 July 2002 9:51 pm, Ben wrote: > On Tue, 2 Jul 2002, Jan Humme wrote: > > No, I just wanted to point out that masquerading provides an easy way to > > get the desired results. > > It does, true, but the howto recommends not using MASQ for static IPs. If > I had just done what told me what to do instead of worrying about problems > that didn't exist, I wouldn't have had to post this question to begin > with. :)
Masquerading will do almost all you want for machines on an internal network making contact with the Internet (ie outbound-initiated traffic), but you will always need specific DNAT rules if you are running a server on the internal network (ie Internet-initiated traffic). Antony.
