Hello there, We have two seperate datacentres, one using 172.16.1.0/24 and the other using 172.16.2.0/24. In front of both are NAT'ing OpenBSD firewalls, using something like:
nat on $ext_if from <prv_net> -> ($ext_if:0) (Where prv_net contains the netblock of that datacentre). Now, I would like that NAT to be conditional on the destination address, such that if a packet from datacentre a (172.16.1.12) was heading to datacentre b (172.16.2.16), then it wouldn't get NAT'ed. Is that possible? How would I do that? Thanks -- joe. Excuse me? Is that your samosa?