Secure Computing SG300 User Manual page 155

1-to-1 NAT is a combination of destination NAT and source NAT. Both destination NAT
and source NAT rules are created for full IP address translation in both directions. This
can be useful if you have a range of IP addresses that have been added as interface
aliases on the SnapGear unit's WAN interface, and want to associate one of these
external alias IP addresses with a single internal, masqueraded computer. This
effectively allocates the internal computer its own real world IP address, also known as a
virtual DMZ.
Port forwarding
Port forwarding rules alter the destination address and optionally the destination port of
packets received by the SnapGear unit.
Port forwarding allows controlled access to services provided by machines on your
private network to users on the Internet by forwarding requests for a specific service
coming into one of the SnapGear unit's interfaces (typically the WAN interface) to a
machine on your LAN, which services the request.
Click Port Forwarding. Any rules that have already been defined are displayed. You
may Edit or Disable/Enable these rules by clicking the appropriate icon. Click New to
add a new rule.
You may also add a new rule above an existing one by clicking the Add Above icon, or
below with Add Below.
Note
The first matching rule determines the action for the network traffic, so the order of the
rules is important. You can use the Move Up and Move Down icons to change the order.
The rules are evaluated top to bottom as displayed on screen.
149
Firewall