Default NAT rules clarification.
-
Why does 127.0.0.0/8 to WAN use the outbound port range 1024:65535 when LAN to WAN does not?
Why is a NAT rule for 127.0.0.0/8 even required? Won't the OS automatically use the WAN interface for all outbound traffic originating from itself?
-
@KurianOfBorg:
Why does 127.0.0.0/8 to WAN use the outbound port range 1024:65535 when LAN to WAN does not?
IIRC that is the default for others it's just explicitly stated in the 127.0.0.1 rule.
@KurianOfBorg:
Why is a NAT rule for 127.0.0.0/8 even required? Won't the OS automatically use the WAN interface for all outbound traffic originating from itself?
Not always, that's for services that explicitly bind to 127.0.0.1 rather than 'any'. It was one of a few things we added that helped squid+multi-WAN function in limited circumstances.
