How do I create NAT-less DMZ?
-
I have a server that needs to be NAT-less but still be behind firewall for traffic shaping purposes.
I have mulitple public IP's (all in same /27 subnet) and the WAN is assigned one of them.
I think what needs to happen is create VLAN'd interface with none as IPv4 and IPv6, create a complete "any protocol any source any destination" rule, and then in the outgoing NAT section, select "do not NAT.
I wont be able to try this until I get back to work after the weekend, but does this seem about right?