Date: Mon, 29 Jun 2015 13:09:02 +0200 From: Milan Obuch <freebsd-pf@dino.sk> To: Ian FREISLICH <ian.freislich@capeaugusta.com> Cc: Daniel Hartmeier <daniel@benzedrine.ch>, freebsd-pf@freebsd.org Subject: Re: Large scale NAT with PF - some weird problem Message-ID: <20150629130902.56ce3a8a@zeta.dino.sk> In-Reply-To: <E1Z9Wlk-00003g-0l@clue.co.za> References: <20150629125432.7aff9e66@zeta.dino.sk> <20150629114506.1cfd6f1b@zeta.dino.sk> <14e119e8fa8.2755.abfb21602af57f30a7457738c46ad3ae@capeaugusta.com> <E1Z6dHz-0000uu-D8@clue.co.za> <E1Z6eVg-0000yz-Ar@clue.co.za> <20150621195753.7b162633@zeta.dino.sk> <E1Z7Ixx-0006K1-5p@clue.co.za> <E1Z7K1Y-0006Ph-ON@clue.co.za> <20150623112331.668395d1@zeta.dino.sk> <20150628100609.635544e0@zeta.dino.sk> <20150629082654.GA22693@insomnia.benzedrine.ch> <20150629105201.7ee24e38@zeta.dino.sk> <20150629092932.GC22693@insomnia.benzedrine.ch> <E1Z9WW6-000PzF-PO@clue.co.za> <E1Z9Wlk-00003g-0l@clue.co.za>
next in thread | previous in thread | raw e-mail | index | archive | help
On Mon, 29 Jun 2015 12:58:32 +0200 Ian FREISLICH <ian.freislich@capeaugusta.com> wrote: > Milan Obuch wrote: > > > > No, there were not much states per problematic IP, maybe just tens > > of them for one or couple internal IPs. That's weird. > > What's the output of 'pfctl -sa' (without the states). > > Ian > Well, it has some ~ 50k lines, and I see no issue currently. I will try to catch it as soon as this issue reappears. Will keep you informed. Milan
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20150629130902.56ce3a8a>