Re: filtering + NAT (Newbie)

2005-04-10 Thread Kimi Ostro
On Apr 8, 2005 6:32 AM, Siju George <[EMAIL PROTECTED]> wrote: > On Apr 6, 2005 10:22 PM, Kimi Ostro <[EMAIL PROTECTED]> wrote: Hi again, well, actually my NAT rule is correct, as I am only translating packets coming _from_ my internal network from ports higher then 1023 (un-privilaged ports) not

Re: filtering + NAT (Newbie)

2005-04-08 Thread Siju George
On Apr 6, 2005 10:22 PM, Kimi Ostro <[EMAIL PROTECTED]> wrote: > Hello ! > > I am trying to understand how NAT affects packet filtering and am not > sure if I am on the right track. My understanding is this; > > $ext_if = "tun0" > $int_if = "fxp1" > > nat on $ext_if from $int_if:network port > 1

filtering + NAT (Newbie)

2005-04-06 Thread Kimi Ostro
Hello ! I am trying to understand how NAT affects packet filtering and am not sure if I am on the right track. My understanding is this; $ext_if = "tun0" $int_if = "fxp1" nat on $ext_if from $int_if:network port > 1023 to any -> ($ext_if) block all pass quick on lo0 pass in quick on $int_if