In most cases, a Full-NAT is used to avoid creating new static routes in other devices. Sometimes, a Full-NAT rule is the only solution. An example of that is when two sites are connected via VPN and you want to offer a public IP at one site for a server located in the other site.
An SNAT simply changes the source (IP and/or service) in a packet. Most of the times I've seen SNAT to be necessary are examples of unexpected changes. If the Astaro is in place, and a decision is made to eliminate another edge router that was handling email, you would put the public IP as an Additional Address on the External interface and SNAT SMTP traffic from it.
In most cases, a Full-NAT is used to avoid creating new static routes in other devices. Sometimes, a Full-NAT rule is the only solution. An example of that is when two sites are connected via VPN and you want to offer a public IP at one site for a server located in the other site.
An SNAT simply changes the source (IP and/or service) in a packet. Most of the times I've seen SNAT to be necessary are examples of unexpected changes. If the Astaro is in place, and a decision is made to eliminate another edge router that was handling email, you would put the public IP as an Additional Address on the External interface and SNAT SMTP traffic from it.
