> Well, the RAWNAT target didn't seem to fit you? > > You could always use iproute2 to do static nat. > > OR - get routable IP addresses... > Normally I would use routable IP's but in this case we have just a handful of them and each IP it's being mapped to multiple real servers on different ports (for many different services). The firewall can handle the connections (as we tweaked max connections months ago). I just wanted to find a better way to not have to have the firewall handle connections that originate internally. I have several subnets internally and I have them set to NOTRACK as they can use direct routing, it's just the external facing servers we have a problem with. Anyway, thanks for the follow up. -- To unsubscribe from this list: send the line "unsubscribe netfilter" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html
