Re: NAT Exempt
As I am a newbie, how actually do I do this? And, how do I make sure that ougoing packets to the Internet get PAT applied via the WAN NIC? (But it doesn't effect incoming packets?
This is an internal firewall that is going to be used to protect a higher classified network. The WAN connection will have a default gateway of the outside firewall (inside NIC)
Ta
Paul
From: William Salt [mailto:williamejsalt <at> googlemail.com]
Sent: Saturday, July 02, 2011 01:51 PM
To: support <at> pfsense.com <support <at> pfsense.com>
Subject: Re: [pfSense Support] NAT Exempt
You want to turn NAT off, turn NAT to manual, then delete the rules. :)
On Jul 2, 2011 1:10 PM, "Paul Rose" <Paul.Rose <at> cnsuk.co.uk> wrote:
>
> I have an internal (LAN) IP address of 10.2.67.11 and an external (WAN) IP of 10.2.66.15
>
> What is the best way to ensure that I do not NAT packets from 10.2.66.15 to 10.2.67.11 but still retaining a firewall
>
> Is there a "How to" of how I would achieve this
>
> I am running PFSense RC2 (latest update)
>
>
> Paul Rose
> Director
> Email:Paul.Rose <at> cnsuk.co.uk
>
> 76 Cannon Street
> London
> EC4N 6AE
> Tel: 020 7213 0923
> Fax: 020 7213 0990
> Mobile: 07970 482038
> Web: http://www.cnsuk.co.uk
>
>
>
>
> -----------------------------
> This message (and any associated files) is intended only for the use of the individual or entity to which it is addressed and may contain information that is confidential, subject to copyright or constitutes a trade secret. If you are not the intended recipient
you are hereby notified that any dissemination, copying or distribution of this message, or files associated with this message, is strictly prohibited. If you have received this message in error, please notify us immediately by replying to the message and
deleting it from your computer. Messages sent to and from us may be monitored.
>
> Internet communications cannot be guaranteed to be secure or error-free as information could be intercepted, corrupted, lost, destroyed, arrive late or incomplete, or contain viruses. Therefore, we do not accept responsibility for any errors or omissions
that are present in this message, or any attachment, that have arisen as a result of e-mail transmission. If verification is required, please request a hard-copy version. Any views or opinions presented are solely those of the author and do not necessarily
represent those of the company.
> -----------------------------
>
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: support-unsubscribe <at> pfsense.com
> For additional commands, e-mail: support-help <at> pfsense.com
>
> Commercial support available - https://portal.pfsense.org
>