How do I limit NAT to specific interfaces? Contributed by BenSmith Published in geeklog Tuesday, June 24 2003 @ 01:01 PM EST Published in oldfaq 2002-Nov-10 00:31 dwelchATphoneboyDOTcom The trick is to set up your NAT rules so that the only way the rules can apply is if they were going out that specific interface. Since the NAT rules are inspected "in-order" much like the regular rulebases (one at a time until a match is found), the ordering of the rules is important. The NAT rules would look like this (assume that "Int-Nets" is a group that includes your Internal nets and the DMZ nets):
Original Translated No. Source Destination Service Source Destination Service 1 Int-Nets Int-nets Any Orig Orig Orig 2 Int-Net Any Any HideAddr Orig Orig
The first rule captures your Intranet traffic. The second rule allows for the translation to occur when you go somewhere
outside your intranet (namely, the Internet).
--
RayLodato - 07 Jan 2004
FAQForm FAQs.Class:
NetworkAddressTranslationFAQs FAQs.OS: FAQs.Version:
How do I limit NAT to specific interfaces? 
2005-08-13 
How do I limit NAT to specific interfaces? 
Linear Mode
