EFW Support

Support => General Support => Topic started by: gkos on Tuesday 22 February 2011, 01:06:09 am



Title: no default NAT setup
Post by: gkos on Tuesday 22 February 2011, 01:06:09 am
I am planning to set up the efw in the firewaling router  mode, for one of the subnet behind the firewall. so I I only need NAT for some network range.

By default the following rule is applied to all outgoing connection on eth1 interface, so all the traffic falls into this category.

Chain SOURCENAT (1 references)
 pkts bytes target     prot opt in     out     source               destination         
 1011 66818 SNAT       all  --  *      eth1    0.0.0.0/0            0.0.0.0/0           to:...


is there a switch or something, that will disable this rule, leaving the decision on what needs to be NATed/notNATed to me.
I can always delete the rule manually, but it wouldn't be convenient really.

any ideas?


Title: Re: no default NAT setup
Post by: gkos on Tuesday 22 February 2011, 01:54:08 am
found solution,

in file
/etc/firewall/snat/outgoingnat.conf

change
on,,,,,UPLINK:ANY,SNAT,standard uplink SNAT,off,

to
off,,,,,UPLINK:ANY,SNAT,standard uplink SNAT,off,