diff --git a/output/feeds/all.atom.xml b/output/feeds/all.atom.xml index e844b16..3681874 100644 --- a/output/feeds/all.atom.xml +++ b/output/feeds/all.atom.xml @@ -1,5 +1,5 @@ -LEdoian's Bloghttps://blog.ledoian.cz/2024-05-08T00:00:00+02:00Only NAT packets you can deliver responses for2024-05-08T00:00:00+02:002024-05-08T00:00:00+02:00LEdoiantag:blog.ledoian.cz,2024-05-08:/masquerade-with-filter.html<p>When setting up a masquerading nat, it is worth considering masquerading only +LEdoian's Bloghttps://blog.ledoian.cz/2024-05-08T13:32:00+02:00Only NAT packets you can deliver responses for2024-05-08T13:32:00+02:002024-05-08T13:32:00+02:00LEdoiantag:blog.ledoian.cz,2024-05-08:/masquerade-with-filter.html<p>When setting up a masquerading nat, it is worth considering masquerading only packets from known networks. That is, instead of rule like <tt class="docutils literal">iifname <span class="pre">eth-inside</span> masquerade</tt> use something like <tt class="docutils literal">iifname <span class="pre">eth-inside</span> ip saddr 198.51.100.0/24 masquerade</tt>.</p> diff --git a/output/feeds/til.atom.xml b/output/feeds/til.atom.xml index bca284a..21a9f3d 100644 --- a/output/feeds/til.atom.xml +++ b/output/feeds/til.atom.xml @@ -1,5 +1,5 @@ -LEdoian's Blog - tilhttps://blog.ledoian.cz/2024-05-08T00:00:00+02:00Only NAT packets you can deliver responses for2024-05-08T00:00:00+02:002024-05-08T00:00:00+02:00LEdoiantag:blog.ledoian.cz,2024-05-08:/masquerade-with-filter.html<p>When setting up a masquerading nat, it is worth considering masquerading only +LEdoian's Blog - tilhttps://blog.ledoian.cz/2024-05-08T13:32:00+02:00Only NAT packets you can deliver responses for2024-05-08T13:32:00+02:002024-05-08T13:32:00+02:00LEdoiantag:blog.ledoian.cz,2024-05-08:/masquerade-with-filter.html<p>When setting up a masquerading nat, it is worth considering masquerading only packets from known networks. That is, instead of rule like <tt class="docutils literal">iifname <span class="pre">eth-inside</span> masquerade</tt> use something like <tt class="docutils literal">iifname <span class="pre">eth-inside</span> ip saddr 198.51.100.0/24 masquerade</tt>.</p>