>>> We have an OpenBSD firewall running for a while now. Since a few days we
>>> encounter some sort of selective natting. I try to ping a host, I get reply,
>>> and 2 minutes later I try to ping the same host and I dont get replies.
>
>> So despite the state being created in both instances, you see a packet
>> egress your external interface with the source address of the internal
>> host instead of the external interface of the NAT box?
>
> We indeed see the state being created. The packet egresses on the external interface without NAT. So the ip packet contains the source ip address of my laptop and therefor further on the path gets blocked because it isn't natted. A few seconds/minutes later I try again and everything works again.
>
> Is there a way to see why it isn't doing the NAT?
>
> (There are around 80 interfaces (vlan + carp) on the box.)
>
> Regards,
>
> Andy.
>
>
>
> No virus found in this outgoing message.
> Checked by AVG Free Edition.
> Version: 7.5.472 / Virus Database: 269.8.13/843 - Release Date: 10/06/2007 13:39
>
>
> ______________________________________________________________________
>
> This email and any files transmitted with it are confidential and intended solely for the use of the individual or entity to whom they are addressed.
> If you have received this email in error please notify the system manager at :
systeembeheer@cegeka.be or call +32-(0)11-240234.
> This footnote also confirms that this email message has been swept by Sophos for the presence of computer viruses.
> ______________________________________________________________________
>
>
