IPsec gateway - Shorewall - 1to1 NAT

Rich Goodwin via Shorewall-users <[email protected]> Mon, 14 Apr 2025 12:37:34 -0500
Newsgroups gmane.comp.security.shorewall
Message-ID <[email protected]>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