From c39ebb3ecd6ca8545cb7f9e600b0699ce95ae5df Mon Sep 17 00:00:00 2001 From: DoTheEvo Date: Sat, 14 Jan 2023 10:39:41 +0100 Subject: [PATCH] update --- opnsense/readme.md | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/opnsense/readme.md b/opnsense/readme.md index 549a5cc..e93ae2b 100644 --- a/opnsense/readme.md +++ b/opnsense/readme.md @@ -15,7 +15,7 @@ Firewall, router, dhcp server, recursive DNS, VPN, traffic monitoring. Opensource.
Backend is FreeBSD with its packet filter `pf` and `configd` for managing daemons, services and templates.
-For web gui frontend it uses lighttpd web server, PHP/Phalcon framework +For web gui it uses lighttpd web server, PHP/Phalcon framework and custom services built in Python. Can be installed on a physical server or in a virtual machine. @@ -106,6 +106,7 @@ checkboxes about NAT reflection, also called hairpin NAT or a NAT loopback. - Reflection for 1:1: `Disabled` - Automatic outbound NAT for Reflection: `Enabled` +*extra info:*
Many consider NAT reflection a hack that should not be used or even allowed.
That the correct way is split DNS, where you maintain DNS records so that `a.example.com` points directly to some local 192.168.0.12 IP address.