Convert between floating and interface (group) rules?

[narubby_star]

You're welcome, let me know, if you found something out!
I will also test this (+ WAN restricting via interface OUT rule) later on, after having re-organized some of my other setup.

[OPNenthu]

Good convo here.

I understood the point that NAT rules with filter rule association set to "Pass" will override interface-level blocks.  But I'm confused about why floating rule blocks would still work.

As Patrick said:

Floating > Groups > Interface

But at every single stage:

NAT > filter

If NAT always comes before Floating, then wouldn't the same issue be there as with interface rules?

Sorry for rehashing.  I think it's important to understand this.  Thanks!

[Patrick M. Hausen]

NAT on an interface comes before filter on an interface. Floating comes before interface. So floating filter - interface NAT - interface filter ...

[keeka]

So floating filter - interface NAT - interface filter ...

I'm putting that on a sticky note above my monitor!

[OPNenthu]

Perfect, thanks!