[Firehol-support] Looking for tutorials or help with NAT.

Costa Tsaousis costa at tsaousis.gr
Tue Aug 26 22:47:00 CEST 2008


Guy wrote:
> If I want port 8000 and port 80 to go back out from the box on the
> LAN, do I just use snat and another router going from lan2internet?
>   
No. You can just snat it and everything will work as it is (firehol 
already matched the traffic in both directions). Keep in mind however 
that you server inside the lan will not be able to see the real IP of 
the client. Everything will appear to come from the firehol host. This 
will really destroy your logs.

Costa





More information about the Firehol-support mailing list