>
> ~BAS
>
> On Mon, 11 Jun 2007, Geraerts Andy wrote:
>
>>
>>>> We have an OpenBSD firewall running for a while now. Since a few days we
>>>> encounter some sort of selective natting. I try to ping a host, I get reply,
>>>> and 2 minutes later I try to ping the same host and I dont get replies.
>>
>>> So despite the state being created in both instances, you see a packet
>>> egress your external interface with the source address of the internal
>>> host instead of the external interface of the NAT box?
>>
>> We indeed see the state being created. The packet egresses on the external interface
>> without NAT. So the ip packet contains the source ip address of my laptop and therefor
>> further on the path gets blocked because it isn't natted. A few seconds/minutes later
>> I try again and everything works again.
>>
>> Is there a way to see why it isn't doing the NAT?
>>
>> (There are around 80 interfaces (vlan + carp) on the box.)
>>
>> Regards,
>>
>> Andy.
>>
>>
>>
>> No virus found in this outgoing message.
>> Checked by AVG Free Edition.
>> Version: 7.5.472 / Virus Database: 269.8.13/843 - Release Date: 10/06/2007 13:39
>>
>>
>> ______________________________________________________________________
>>
>> This email and any files transmitted with it are confidential and intended solely for
>> the use of the individual or entity to whom they are addressed.
>> If you have received this email in error please notify the system manager at :
>>
systeembeheer@cegeka.be or call +32-(0)11-240234.
>> This footnote also confirms that this email message has been swept by Sophos for the
>> presence of computer viruses.
>> ______________________________________________________________________
>>
>>
>
> l8*
> -lava (Brian A. Seklecki - Pittsburgh, PA, USA)
>
http://www.spiritual-machines.org/
>
> "Guilty? Yeah. But he knows it. I mean, you're guilty.
> You just don't know it. So who's really in jail?"
> ~Maynard James Keenan
