Large scale NAT with PF - some weird problem

Daniel Hartmeier daniel at benzedrine.ch
Mon Jun 29 07:04:02 UTC 2015


On Sun, Jun 28, 2015 at 10:06:09AM +0200, Milan Obuch wrote:

> So, now I am at 10.2-PRERELEASE, r284884, and the issue is still here.
> It is totally weird, just change of IP the device is being natted to
> makes the issue disappear for this particular customer, but as soon as
> this exact IP is used again, the issue is here again.

I'd go over the entire network config (pf.conf, pfctl -sa, rc.conf,
netstat -anr, ifconfig, arp -an) and look for any mistake, like a
typo or a netmask which isn't what you thought it is (like on an
alias), or for any weirdness related to that IP address.

Daniel


More information about the freebsd-pf mailing list