 Re: same internal host mapped to 2 different static ip address
Ahh yes, you are correct, my mistake. The Destination is different in the second rule so if they have a link to the second public IP, it would still work, but it would be an issue with NAT still.
So instead of an explicit block rule, you could change the SRC = Any in the second rule to be SRC = (Negated) Intranet and the rulebase will be cleaner. The NAT sequence still applies. __________________
There's no place like 127.0.0.1 |