From 53cc5442dced7fbdd3e67f75968e5a1d86639d7f Mon Sep 17 00:00:00 2001 From: Pavel 'LEdoian' Turinsky Date: Wed, 8 May 2024 13:33:15 +0200 Subject: [PATCH] render --- output/feeds/all.atom.xml | 2 +- output/feeds/til.atom.xml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/output/feeds/all.atom.xml b/output/feeds/all.atom.xml index e844b16..3681874 100644 --- a/output/feeds/all.atom.xml +++ b/output/feeds/all.atom.xml @@ -1,5 +1,5 @@ -LEdoian's Bloghttps://blog.ledoian.cz/2024-05-08T00:00:00+02:00Only NAT packets you can deliver responses for2024-05-08T00:00:00+02:002024-05-08T00:00:00+02:00LEdoiantag:blog.ledoian.cz,2024-05-08:/masquerade-with-filter.html<p>When setting up a masquerading nat, it is worth considering masquerading only +LEdoian's Bloghttps://blog.ledoian.cz/2024-05-08T13:32:00+02:00Only NAT packets you can deliver responses for2024-05-08T13:32:00+02:002024-05-08T13:32:00+02:00LEdoiantag:blog.ledoian.cz,2024-05-08:/masquerade-with-filter.html<p>When setting up a masquerading nat, it is worth considering masquerading only packets from known networks. That is, instead of rule like <tt class="docutils literal">iifname <span class="pre">eth-inside</span> masquerade</tt> use something like <tt class="docutils literal">iifname <span class="pre">eth-inside</span> ip saddr 198.51.100.0/24 masquerade</tt>.</p> diff --git a/output/feeds/til.atom.xml b/output/feeds/til.atom.xml index bca284a..21a9f3d 100644 --- a/output/feeds/til.atom.xml +++ b/output/feeds/til.atom.xml @@ -1,5 +1,5 @@ -LEdoian's Blog - tilhttps://blog.ledoian.cz/2024-05-08T00:00:00+02:00Only NAT packets you can deliver responses for2024-05-08T00:00:00+02:002024-05-08T00:00:00+02:00LEdoiantag:blog.ledoian.cz,2024-05-08:/masquerade-with-filter.html<p>When setting up a masquerading nat, it is worth considering masquerading only +LEdoian's Blog - tilhttps://blog.ledoian.cz/2024-05-08T13:32:00+02:00Only NAT packets you can deliver responses for2024-05-08T13:32:00+02:002024-05-08T13:32:00+02:00LEdoiantag:blog.ledoian.cz,2024-05-08:/masquerade-with-filter.html<p>When setting up a masquerading nat, it is worth considering masquerading only packets from known networks. That is, instead of rule like <tt class="docutils literal">iifname <span class="pre">eth-inside</span> masquerade</tt> use something like <tt class="docutils literal">iifname <span class="pre">eth-inside</span> ip saddr 198.51.100.0/24 masquerade</tt>.</p>