Re: PF NAT Address Pool Source Interface

2005-12-07 Thread Steven S
[EMAIL PROTECTED] wrote: > On Mon, 5 Dec 2005 10:40:31 -0500 (EST), Brian A. Seklecki wrote: > >> All: >> ... >> Even if other hosts receive a packet and reply to it, they won't be >> able to ARP for it, and if they could, the original OpenBSD box will >> drop the reply with destination host/netw

Re: PF NAT Address Pool Source Interface

2005-12-06 Thread Rod.. Whitworth
On Mon, 5 Dec 2005 10:40:31 -0500 (EST), Brian A. Seklecki wrote: >All: > >It may seem rudimentary, but no where in the FAQ or man pages is it >explicitly stated that the source address or address pool of a NAT >translation must be assigned to an interface. > >Obviously it can be either be a pri

PF NAT Address Pool Source Interface

2005-12-05 Thread Brian A. Seklecki
All: It may seem rudimentary, but no where in the FAQ or man pages is it explicitly stated that the source address or address pool of a NAT translation must be assigned to an interface. Obviously it can be either be a primary address (such as 99.9% of the PAT configurations on the Internet)