OPNsense Forum

English Forums => 26.1 Series => Topic started by: dbd on January 29, 2026, 01:47:07 PM

Title: Source NAT vs Outbound ?
Post by: dbd on January 29, 2026, 01:47:07 PM
Hi.
Just upgraded a small OPNSense setup from 25.7.11 to 26.1. It went well, including the migration of rules to the new system (although this was a very simple setup, and I'm a bit worried about my bigger production system which has thousands of rules, in a HA pair of OPNSense ...)
One thing I wonder now with the new rules interfaces, is the difference between NAT -> Source NAT and NAT -> Outbound (as the later is obviously a Source NAT too). Could someone clarify ? Will a later migration process be needed to migrate Outbound rules to Source NAT ? Or will this just be a manual process ?
Title: Re: Source NAT vs Outbound ?
Post by: Monviech (Cedrik) on January 29, 2026, 01:49:01 PM
https://docs.opnsense.org/manual/nat.html#source-nat

It's not finished yet, Outbound NAT is still the main page. About plans and possible migration, we don't know yet, it might be a roadmap item for a new release.
Title: Re: Source NAT vs Outbound ?
Post by: OPNenthu on February 12, 2026, 04:43:43 AM
I don't see a "static port" option on the new Source NAT interface (maybe that's one of the TBD items) but can I assume that source port randomization is still done by default? 

I'm currently using the Hybrid mode and tempted to try and migrate some manual rules from the Outbound UI but leave the automatic rules in place, and change it back to Automatic mode.  Bad idea at this time?
Title: Re: Source NAT vs Outbound ?
Post by: keeka on February 12, 2026, 09:54:04 AM
Quote from: OPNenthu on Today at 04:43:43 AMI don't see a "static port" option on the new Source NAT interface

I was wondering the same. There is the 'Translate Source Port' field. Maybe setting this to the same port/alias as 'Source port', equates to static port mapping?