With 3 NICs (Internal, DMZ and Internet), What network definnition must I use or create to identify the Internet traffic source? I want to avoid the use of 'any'.
The only NAT rule you will need is a masquerade rule, if you are using private numbers (172..., 192.168..., 10...) for your internal networks.
If you use the HTTP proxy, you don't even need rules! (There are pros and cons to using the proxy, that will be determined by your particular requirements).
You can also elect to tighten up the Internal Any Any rule above to just the services you need to have go out...
I have a problem if I use masquerade rule for the internal network and DNAT on each IP of the DMZ with addicional IP on the Internet adapter: The internal clients don't resolve public IPs of the DMZ.
I have a problem if I use masquerade rule for the internal network and DNAT on each IP of the DMZ with addicional IP on the Internet adapter: The internal clients don't resolve public IPs of the DMZ.
