For outgoing packets, does NAT happen before WAN firewall rules enforcement?

[pubmsu]

Hi there,

For outgoing packets, does NAT happen before WAN firewall rules enforcement? Like if I want to refer to a LAN ip as source in a floating rule that is set on interface WAN and direction "out", will that rule be effective? (for the purpose, the rule can't be placed in LAN interface)

Thanks,
msu

[jimp]

@pubmsu:

For outgoing packets, does NAT happen before WAN firewall rules enforcement?

Yes. NAT is always before firewall rules (in both directions)

@pubmsu:

Like if I want to refer to a LAN ip as source in a floating rule that is set on interface WAN and direction "out", will that rule be effective? (for the purpose, the rule can't be placed in LAN interface)

No, you can't do that as it will never match the LAN IP as the source.