Hello, I would like to replace all my masquerade rules with Source NAT (SNAT). This has already been done for several internal subnets and appears to work fine. We do not use dynamic external IP addressing so I believe there is no need for masquerade…