Hi, What's the REAL differences between MASQ and SNAT? I've had a problem where it didn't work with SNAT but it did work with MASQ... The setup was two firewalls (A and B) with a Ipsec tunnel between them and and another VPN onward from B. The old setup was to masquerade all the traffic from site A, even the traffic out on the VPN between FW A and FW B. Due to some other changes i had to remove the masquerade for traffic the over the VPN and do SNAT on FW B instead. This worked for everything but one machine. If i turned on MASQ for that machine on FW A everything worked again which made me puzzled what MASQ is doing that SNAT isn't. So, does MASQ do anything that SNAT doesn't in form of changing the header or such? Or should i find the answer in the Windows machine that was putting up the fight? // Jimmy -- Jimmy Hedman South Pole AB Phone: +46 8 51420420 Gelbjutarvägen 5 Fax: +46 8 51420429 SE - 17148 Solna e-mail: jimmy.hedman@xxxxxxxxxxxx www.southpole.se
