Rules on 1:1 NAT

[fireix]

I have a specific rule in NAT and later a more general rule - match a public ip to a private.

It is really the first one that should be executed and not the general one that the above also would be affected by. Is this how it works by default or does the traffic gets duplicated?

PS: I'm blocked by Akismet for my IP for some reason and been for a long time... If any forum admin can see this. It is IP from one of the biggest players in my country and hopefully nothing shady going on there. Using vpn to bypass now, but I would think you should correct it.

[viragomann]

No, the traffic doesn't get duplicated. It goes by the first match wins.

So if the first rule in your rule set matches, it is applied and subsequent rules are ignored.