On 19/05/2022 12:01, Edgar Fuß wrote:
-- for a packet processed by an ipnat rdr rule, you, in an ipf rule, need to use the re-written port number
are you referring to the internal interface? (on the front-facing interface, it would be the original port number)
also ipnat is dont on the front-facing interface right? or you're doing a gateway with only one NIC? (also possible) -- Pierre-Philipp Braun SMTP Health Campaign: enforce STARTTLS and verify MX certificates <https://nethence.com/smtp/>