Topics

Silly question, but I just don't get it.  In Firewall > Shaper, all of the tabs have two columns of checkboxes.  Why?  I don't understand when to use one or the other and I see no help available for that.

I have syslog configured to send to a host on my internal network, at a private IP address.  That's working fine.
But when I capture packets with tcpdump on my external (WAN) interface, I see syslog packets addressed to that system there too.  Is this intentional?