On Mon, Jul 14, 2008 at 10:28:18PM -0700, Parvinder Bhasin wrote: >> Filtering happens AFTER translation, so you need to filter on the real >> addresses of the hosts, not the alias addresses. > > Hmm by real ip do you mean internal ips of the servers??
Yes.
