From a73f50e2bb28d6816f2f42806afa1fe4a7d6b886 Mon Sep 17 00:00:00 2001
From: Chris Buechler <cmb@pfsense.org>
Date: Sat, 24 Apr 2010 22:36:49 -0400
Subject: add note about 1:1s and interface IPs

---
 usr/local/www/firewall_nat_1to1.php | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

(limited to 'usr')

diff --git a/usr/local/www/firewall_nat_1to1.php b/usr/local/www/firewall_nat_1to1.php
index d44ced8..52a1268 100755
--- a/usr/local/www/firewall_nat_1to1.php
+++ b/usr/local/www/firewall_nat_1to1.php
@@ -158,7 +158,9 @@ include("head.inc");
 		<tr>
 		  <td colspan="4">
 		        <p><span class="vexpl"><span class="red"><strong>Note:<br>
-                      </strong></span>Depending on the way your WAN connection is setup, you may also need a <a href="firewall_virtual_ip.php">Virtual IP</a>.</span></p>
+                      </strong></span>Depending on the way your WAN connection is setup, you may also need a <a href="firewall_virtual_ip.php">Virtual IP</a>.<br/>
+			If you add a 1:1 NAT entry for any of the interface IPs on this system, it will make this system inaccessible on that IP address. i.e. if
+			you use your WAN IP address, any services on this system (IPsec, OpenVPN server, etc.) using the WAN IP address will no longer function.</span></p>
 		  </td>
 		<tr>
               </table>
-- 
cgit v1.1