Date: Sun, 28 Jun 2015 10:06:09 +0200 From: Milan Obuch <freebsd-pf@dino.sk> To: Ian FREISLICH <ian.freislich@capeaugusta.com> Cc: freebsd-pf@freebsd.org Subject: Re: Large scale NAT with PF - some weird problem Message-ID: <20150628100609.635544e0@zeta.dino.sk> In-Reply-To: <20150623112331.668395d1@zeta.dino.sk> References: <20150623101225.4bc7f2d0@zeta.dino.sk> <20150623073856.334ebd61@zeta.dino.sk> <20150621133236.75a4d86d@zeta.dino.sk> <20150620182432.62797ec5@zeta.dino.sk> <20150619091857.304b707b@zeta.dino.sk> <14e119e8fa8.2755.abfb21602af57f30a7457738c46ad3ae@capeaugusta.com> <E1Z6dHz-0000uu-D8@clue.co.za> <E1Z6eVg-0000yz-Ar@clue.co.za> <20150621195753.7b162633@zeta.dino.sk> <E1Z7Ixx-0006K1-5p@clue.co.za> <E1Z7K1Y-0006Ph-ON@clue.co.za> <20150623112331.668395d1@zeta.dino.sk>
next in thread | previous in thread | raw e-mail | index | archive | help
On Tue, 23 Jun 2015 11:23:31 +0200 Milan Obuch <freebsd-pf@dino.sk> wrote: > On Tue, 23 Jun 2015 10:57:44 +0200 > Ian FREISLICH <ian.freislich@capeaugusta.com> wrote: > [ snip ] > > So, I think that the problem is with 9-STABLE. I hate "upgrade to > > solve your problems" answers because they may not. I do know that > > 10 has seen a lot of work and none of that work will make it back > > into 9 because of the PF rewrite. Maybe someone else in this group > > will chime in. > > > > That's OK. I am a bit conservative on upgrades here because with > hundreds - thousands users you need a bit of stability too, but > upgrade to 10-STABLE is currently being prepared. That being written, > it will not occur today. > So, now I am at 10.2-PRERELEASE, r284884, and the issue is still here. It is totally weird, just change of IP the device is being natted to makes the issue disappear for this particular customer, but as soon as this exact IP is used again, the issue is here again. Could anybody help me to debug this better? It looks like I really REALLY need some help :( Hate to write anything like this, but it is urgent for me and I am out of ideas... Regards, Milan
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20150628100609.635544e0>