Find useless NAT
hknutzen opened this issue · 0 comments
hknutzen commented
When is a "bind_nat = x" useless?
- bind_nat is applied to an unmanaged device and
- the area where this bind_nat is applicable, has no managed device and
- this bind_nat doesn't prevent an address conflict.
How do we check this?
- is easy
- needs to find the area bordered by other occurences of "bind_nat = x".
If this area is located inside a single zone or zone_cluster, then there is no managed device. - we need to check all networks with nat:x and compare its address with all networks inside the bind_nat area. We can't always use the original address, but must check if some other NAT is applied.
This seems to be rather complex.