Navigation

    Netgate Discussion Forum
    • Register
    • Login
    • Search
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search

    For outgoing packets, does NAT happen before WAN firewall rules enforcement?

    Firewalling
    2
    2
    541
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • P
      pubmsu last edited by

      Hi there,

      For outgoing packets, does NAT happen before WAN firewall rules enforcement? Like if I want to refer to a LAN ip as source in a floating rule that is set on interface WAN and direction "out", will that rule be effective? (for the purpose, the rule can't be placed in LAN interface)

      Thanks,
      msu

      1 Reply Last reply Reply Quote 0
      • jimp
        jimp Rebel Alliance Developer Netgate last edited by

        @pubmsu:

        For outgoing packets, does NAT happen before WAN firewall rules enforcement?

        Yes. NAT is always before firewall rules (in both directions)

        @pubmsu:

        Like if I want to refer to a LAN ip as source in a floating rule that is set on interface WAN and direction "out", will that rule be effective? (for the purpose, the rule can't be placed in LAN interface)

        No, you can't do that as it will never match the LAN IP as the source.

        Remember: Upvote with the 👍 button for any user/post you find to be helpful, informative, or deserving of recognition!

        Need help fast? Netgate Global Support!

        Do not Chat/PM for help!

        1 Reply Last reply Reply Quote 0
        • First post
          Last post