Hilton Travis wrote:

> Yup - m0n0wall provides anti-spoofing (no internal IPs allowed to appear
> inbound on the WAN/OPT interfaces.  This is what causes the "I cannot
> get to my DMZ machines by their real-world addresses" issues that are
> easily overcome by editing the /etc/hosts mappings on m0n0wall.

Not quite - if it was just that, we could solve that problem in an 
elegant way. It's actually a restriction in ipnat. Read

http://m0n0.ch/wall/docs/book/view/27
and
http://coombs.anu.edu.au/~avalon/ipfilfaq.html#IV-8

for details.

- Manuel