Avoiding natd overhead

[Matthew D. Fuller]

On Sat, Oct 21, 2006 at 03:54:06PM -0600 I heard the voice of
Brett Glass, and lo! it spake thus:
> 
> Also, more than once I've locked myself out of a machine when trying
> to restart NAT with a different configuration;

The trick I've adopted for this is to have allow rules for port 22
both directions BEFORE the divert rule for natd.  That way even if
it's down, I can still talk ssh.


-- 
Matthew Fuller     (MF4839)   |  fullermd at over-yonder.net
Systems/Network Administrator |  http://www.over-yonder.net/~fullermd/
           On the Internet, nobody can hear you scream.