|
||||||||
You may need proxy arp even for 1:1 NAT in some cases. In your case, if the setup is correct, the 1:1 NAT makes all the services and ports you have on the inside system 192.168.2.2 available on the outside IP 1.1.1.2, minus the one you may filter and stop in the firewall rules. Server NAT is similar, but it is more flexible, you can map to the outside address 1.1.1.2 several services which may be on different systems behind the firewall. port 25 for 192.168.2.2 and port 110 for 192.168.2.3, for example. |