On Apr 8, 2005 6:32 AM, Siju George <[EMAIL PROTECTED]> wrote:
> On Apr 6, 2005 10:22 PM, Kimi Ostro <[EMAIL PROTECTED]> wrote:
Hi again,
well, actually my NAT rule is correct, as I am only translating
packets coming _from_ my internal network from ports higher then 1023
(un-privilaged ports) not
On Apr 6, 2005 10:22 PM, Kimi Ostro <[EMAIL PROTECTED]> wrote:
> Hello !
>
> I am trying to understand how NAT affects packet filtering and am not
> sure if I am on the right track. My understanding is this;
>
> $ext_if = "tun0"
> $int_if = "fxp1"
>
> nat on $ext_if from $int_if:network port > 1
Hello !
I am trying to understand how NAT affects packet filtering and am not
sure if I am on the right track. My understanding is this;
$ext_if = "tun0"
$int_if = "fxp1"
nat on $ext_if from $int_if:network port > 1023 to any -> ($ext_if)
block all
pass quick on lo0
pass in quick on $int_if