Petr Verner said:
>    m0n0wall is great work. but I have one suggestion: could be advanced
> outbound NAT more advanced :-) ? I mean, with ipnat you can do not only:
> map fxp0 10.1.0.0/16 -> 0.0.0.0/32
> but also:
> map fxp0 from 10.1.0.0/16 to 192.168.0.0/16 -> 0.0.0.0/32
> or even:
> map fxp0 from 10.1.0.0/16 ! to 192.168.0.0/16 -> 0.0.0.0/32
>
> it means: do NAT on packets which goes only to 192.168.0.0/16 network
> (resp. do NAT on all packets except those that goes to 192.168.0.0/16
> network)
>
> I've already made this changes, so I hope you find it usable:

Hey, cool - thanks! I'll give it a try and probably incorporate it into
the next m0n0wall release...

- Manuel