How to set up logs to record nat static？

General questions
1

How to set up logs to record nat static？

2

Not implemented for the static

3

How to make up for this functional deficiency?

4

Static NAT is the same as SNAT and DNAT together just in one
You can use them

5

Since its static you already know which IP is getting translated from/to which gives if you want to log the traffic you can do so on the regular firewall rules that allows this NATed traffic (depending on direction the rule will either be before nating or after nating).

As I recall it the firewall rules will for SNAT act on the new srcip aka after NATing occured (because thats what input/output/forward chains will see) while for DNAT the firewall rules will act on the old dstip (aka before NATing occured).

The flow for this is like: ingress → SNAT (if needed) → firewall rules → DNAT (if needed) → egress

6

afaik , order is:
ingress → DNAT (if needed) → firewall/routing → SNAT (if needed) → egress

1 Like
7

Thank you for your reply. I will give it a try.

8

Thank you for your reply.