18.6. DMZ to Untrust (nat src)

set policy id 94 from "Untrust" to "DMZ"  "Any" "Any" "ANY" permit log
set policy id 94 disable
set policy id 94
exit
set policy id 95 from "DMZ" to "Untrust"  "Any" "Any" "ANY" nat src permit log
set policy id 95
exit
set policy id 96 from "Trust" to "DMZ"  "Any" "Any" "ANY" permit
set policy id 96
exit
set policy id 97 from "DMZ" to "Trust"  "Any" "Any" "ANY" permit log
set policy id 97
exit
		

未设置nat src,DMZ 将不能访问外网

原文出处：Netkiller 系列 手札
本文作者：陈景峯
转载请与作者联系，同时请务必标明文章原始出处和作者信息及本声明。