Bug 11937

Summary:	firewall: SNAT on RED also NATs packets that are going through a VPN
Product:	IPFire	Reporter:	Michael Tremer <michael.tremer>
Component:	---	Assignee:	Alexander Marx <alexander.marx>
Status:	CLOSED DUPLICATE	QA Contact:
Severity:	Major Usability
Priority:	Will only affect a few users
Version:	2
Hardware:	unspecified
OS:	Unspecified
Bug Depends on:
Bug Blocks:	12278

Description Michael Tremer 2018-11-22 13:33:33 UTC

I have a SNAT rule for our IPFire email server which NATs all outgoing SMTP connection to the public IP address of the mail server.

That rule also NATs all SMTP packets that are going through a VPN which I did not expect.

The source of the rule is the IP address of the email server, destination is RED.

There should be entries in the SNAT table for all non-NAT rules that just run ACCEPT so that NAT never happens for those rules where it is not intended.

Comment 1 Michael Tremer 2020-02-20 14:40:33 UTC


*** This bug has been marked as a duplicate of bug 12162 ***