On Fri, Jul 13, 2001 at 01:36:42PM +0300, Ari Suutari wrote:
> Hi,
>
> Doesn't sound good that IP header with private IP address
> gets sent to internet. - after all, the 195.168.3.210 host on internet knows
> nothing about 10.10.1.2...
>
We have discussed this before with Brian and Charles, and have come
up to an agreement that FIREWALL should block these packets, not NAT.
Cheers,
--
Ruslan Ermilov Oracle Developer/DBA,
[EMAIL PROTECTED] Sunbay Software AG,
[EMAIL PROTECTED] FreeBSD committer,
+380.652.512.251 Simferopol, Ukraine
http://www.FreeBSD.org The Power To Serve
http://www.oracle.com Enabling The Information Age
To Unsubscribe: send mail to [EMAIL PROTECTED]
with "unsubscribe freebsd-net" in the body of the message
