Skip site navigation (1)Skip section navigation (2)
Date:      Mon, 29 Jun 2015 10:26:54 +0200
From:      Daniel Hartmeier <daniel@benzedrine.ch>
To:        Milan Obuch <freebsd-pf@dino.sk>
Cc:        Ian FREISLICH <ian.freislich@capeaugusta.com>, freebsd-pf@freebsd.org
Subject:   Re: Large scale NAT with PF - some weird problem
Message-ID:  <20150629082654.GA22693@insomnia.benzedrine.ch>
In-Reply-To: <20150628100609.635544e0@zeta.dino.sk>
References:  <20150620182432.62797ec5@zeta.dino.sk> <20150619091857.304b707b@zeta.dino.sk> <14e119e8fa8.2755.abfb21602af57f30a7457738c46ad3ae@capeaugusta.com> <E1Z6dHz-0000uu-D8@clue.co.za> <E1Z6eVg-0000yz-Ar@clue.co.za> <20150621195753.7b162633@zeta.dino.sk> <E1Z7Ixx-0006K1-5p@clue.co.za> <E1Z7K1Y-0006Ph-ON@clue.co.za> <20150623112331.668395d1@zeta.dino.sk> <20150628100609.635544e0@zeta.dino.sk>

next in thread | previous in thread | raw e-mail | index | archive | help
On Sun, Jun 28, 2015 at 10:06:09AM +0200, Milan Obuch wrote:

> So, now I am at 10.2-PRERELEASE, r284884, and the issue is still here.
> It is totally weird, just change of IP the device is being natted to
> makes the issue disappear for this particular customer, but as soon as
> this exact IP is used again, the issue is here again.

Do you have access to the upstream router?
Can you check its ARP table?

It could have a static ARP entry for this specific IP address, or there
could be an address conflict for that IP address...

Can't you tell us the network, netmask and the IP address?
Not even with the first octet redacted?

Daniel



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20150629082654.GA22693>