We use iptables to implement SNAT for our users with a dozen external IP's in round robin (for load balancing). Our developers require port forwarding to their machines and have each requestded a range of 10 ports on which they can expose their machines directly to the Internet.
In order to prevent exhausting the amount of ports available, we would like to dedicate an IP exclusively for DNAT. However, in this scenario, their outbound connections would often be made from a different address to the one they have been assigned for DNAT. I know this would not normally cause any issues but I'm wondering if there are any applications which require port forwarding that would require that the IP's are the same?
