On Fri, Sep 05, 2003 at 11:36:09AM -0300, Peter Marshall wrote: > That is a pretty good solution for the SNAT. I never thought about MASQ. > However .... I am not sure if the DNAT is the best solution .... WHat if > you had multiple ip numbers on the external card .... and they're all dynamic? Give us an example... Ramin > More importantly, what about trying to connect directly to the firewall from > an external address.