Not for inbound traffic it isn't. --Bill
On 8/4/06, A. Jones <[EMAIL PROTECTED]> wrote:
The original rule on the firewall is already good for that. >From: "Bill Marquette" <[EMAIL PROTECTED]> >Reply-To: support@pfsense.com >To: support@pfsense.com >Subject: Re: [pfSense Support] Can't get basic routing to work. >Date: Fri, 4 Aug 2006 16:32:28 -0500 > >On 8/4/06, A. Jones <[EMAIL PROTECTED]> wrote: >>I have a whole subnet, routing is what I need. >>The computers also MUST have public IP addresses assigned to their >>interfaces. >>That will also screw me over when one of the subnets needs to talk to the >>other subnet using public IPs.... >>http://faq.pfsense.com/index.php?action=artikel&cat=8&id=29&artlang=en >> >>I also would have to get my ISP to change the routing to my network as the >>routing currently is >> >>xxx.xxx.xx1.001 modem >>xxx.xxx.xx1.002 WAN >> >>xxx.xxx.xx2.001 LAN >>xxx.xxx.xx2.002 Computer >>xxx.xxx.xx2.003 Computer >>xxx.xxx.xx2.004 Computer >>xxx.xxx.xx2.005 Computer >> >>and the static route is xxx.xxx.xx2.xxx/26 xxx.xxx.xx1.002 >>so there are no "extra" IPs on the outside with which to do 1:1 to begin >>with. > >Actually, for this you use the "other" virtual IP type. But that's >beside the point since you have a requirement for public IPs on the >actual machines. Enabling advanced outbound nat, then deleting the >rules _should_ be the way you need this to work. I assume you put >rules in on the WAN interface to allow the traffic?? :) > >--Bill > >--------------------------------------------------------------------- >To unsubscribe, e-mail: [EMAIL PROTECTED] >For additional commands, e-mail: [EMAIL PROTECTED] > _________________________________________________________________ Express yourself instantly with MSN Messenger! Download today - it's FREE! http://messenger.msn.click-url.com/go/onm00200471ave/direct/01/ --------------------------------------------------------------------- To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
--------------------------------------------------------------------- To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
