Re: Link Balancer, marks & NATed servers

Whit Blauvelt <[email protected]> Tue, 28 Nov 2017 09:47:44 -0500
Newsgroups gmane.comp.security.firewalls.firehol.user
Message-ID <[email protected]>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