Re: is nat to (egress) possible ?

2013-01-10 Thread Alexander Hall 
"Илья Шипицин"  wrote:

>I'm running multi-homed firewal.
>at every single moment only one interface belongs to "egress" group.

I don't think that matters.

>
>is it possible to do something like that
>
>match out from 192.168.0.0/16 to ! 192.168.0.0/16 nat-to (egress)

IIRC that's about how I've been doing it for ages.

Why don't you just try it?

/Alexander

>
>?
>
>Cheers,
>Ilya Shipitsin

is nat to (egress) possible ?

2013-01-10 Thread Илья Шипицин 
I'm running multi-homed firewal.
at every single moment only one interface belongs to "egress" group.

is it possible to do something like that

match out from 192.168.0.0/16 to ! 192.168.0.0/16 nat-to (egress)

?

Cheers,
Ilya Shipitsin