[ previous ] [ next ] [ threads ]
 From:  <lola at yais dot net>
 To:  <m0n0wall at lists dot m0n0 dot ch>
 Subject:  Re: [m0n0wall] Destinatin Interfaces & NAT
 Date:  Thu, 29 Jul 2004 17:03:55 +0200
> Von: Jon Tackabury <jtackabury at binaryfortress dot com>
> Datum: Thu, 29 Jul 2004 08:53:24 -0400
> An: m0n0wall at lists dot m0n0 dot ch
> Betreff: [m0n0wall] Destinatin Interfaces & NAT
> Question 1: Is it possible to specify a destination interface for the
> ruleset?  I need to say something like "Drop All UDP traffic going out
> the OPT1 interface" but I can only seem to specify a destination address.

i am missing that too!!!

> Question 2: Do the filter rules get processed before that NAT rules?
> Like if I create a rule that says "Drop all traffic from",
> will it still get NAT'd out to the WAN?

nat happens before looking at the rules. this means your ruleset only "sees"
the already natted ips.