I have been trying for a few days to move my servers behind a pfsense firewall using virtual ips and nat 1:1 to the servers. Can anyone tell me that this will work? I have been having trouble and since its a production server I only have 15min per day of down time if I'd like to keep my quoted uptime. During my testing I as able to get FTP,SSH,SMTP to work with the correct ports opened up but was unable to get the websites to show. Is this due to named base virtual hosting? From what I understand about the 1:1 NAT is from the outside you request a website from 220.127.116.11 | --> then it moves it to 10.0.0.235 Server answers and sends back and firewall send back as 18.104.22.168. But I am wondering if something is being lost in the transaction? Also my DNS servers were acting up, I am running mydns with mysql. With the virtual IPS forwarded to the internal ip with the 1:1 nat the server should be on the outside and with no firewall rule breaking it it should deliver answer to DNS queries right?