Disguising a device behind 1:1 NAT

[senseivita]

In the following diagram... :

(...) I'd like to disguise HOST's real IP address from the rest of the network downstream but I'm not sure which is the right interface to select in the 1:1 settings. I think it's if0 but it doesn't connect directly to the internal or external IP address, does it matter?

The documentation says to select "The interface where the 1:1 NAT translation will take place, typically a WAN type interface." This is it, right??

Thanks.

[senseivita]

It worked!

Except... Now HOST wasn't able to access the Internet, I guess because it's natted too. I added rules to give it access which made me realize I don't know which internal inbound interface (if1or if2) would accept the traffic to NAT it to the WAN one so I added rules in both but still no access.

At least I got the answer to my question. :)

[johnpoz]

@skilledinept said in Disguising a device behind 1:1 NAT:

I'd like to disguise HOST's real IP address from the rest of the network downstream

For what purpose? Just at a loss to why anyone would want to do this?