From owner-freebsd-questions@FreeBSD.ORG Fri Sep 12 09:36:31 2003 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 5347B16A4BF for ; Fri, 12 Sep 2003 09:36:31 -0700 (PDT) Received: from out005.verizon.net (out005pub.verizon.net [206.46.170.143]) by mx1.FreeBSD.org (Postfix) with ESMTP id 495704400F for ; Fri, 12 Sep 2003 09:36:30 -0700 (PDT) (envelope-from cswiger@mac.com) Received: from mac.com ([68.237.14.199]) by out005.verizon.net (InterMail vM.5.01.05.33 201-253-122-126-133-20030313) with ESMTP id <20030912163629.KYJ15786.out005.verizon.net@mac.com>; Fri, 12 Sep 2003 11:36:29 -0500 Message-ID: <3F61F60A.1010903@mac.com> Date: Fri, 12 Sep 2003 12:36:26 -0400 From: Chuck Swiger Organization: The Courts of Chaos User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.4) Gecko/20030624 X-Accept-Language: en-us, en MIME-Version: 1.0 To: Douglas Carmichael References: <00A25C47.FAD60D53.8@mail.ourservers.net> In-Reply-To: <00A25C47.FAD60D53.8@mail.ourservers.net> X-Enigmail-Version: 0.76.5.0 X-Enigmail-Supports: pgp-inline, pgp-mime Content-Type: text/plain; charset=us-ascii; format=flowed Content-Transfer-Encoding: 7bit X-Authentication-Info: Submitted using SMTP AUTH at out005.verizon.net from [68.237.14.199] at Fri, 12 Sep 2003 11:36:29 -0500 cc: freebsd-questions@freebsd.org Subject: Re: Long-running connections stop working through a FreeBSD 5.1R firewall/NAT box... X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 12 Sep 2003 16:36:31 -0000 Douglas Carmichael wrote: > HTTP connections across the firewall work fine (ie. web browsing) and I can > maintain a connection to a streaming radio station just fine from my > PowerBook inside the firewall, but AIM, ICQ, and Yahoo Messenger seem to > stay up for a while and then just unexpectedly disconnect (the client > has to reconnect). What could be the problem? You're using NAT. NAT implementations have a finite number of dynamic rules available and/or time out old connections, thus dropping long-running persistent connections. (That behavior isn't desirable, but is "normal" for NAT....) -- -Chuck