Outgoing NAT failure
-
Hi,
I have two pfSense (2.0RC1 built on Sat Feb 26 18:07:23 EST 2011 ) boxes in failover mode. The WAN IP address has been set as a Carp IP address and everything works fine when you browse the internet.
Until you try to do a download.
When downloading a file, after a while, it stalls. On the LAN side, with a tcpdump I can see that the server on the internet just stopped sending packets.
On the WAN side, with the capture I see that suddenly pfSense stops passing data back to the LAN client and starts sending packets like the following one to the internet server:
8:13:54.058314 IP 1.1.1.1 > pub4.kernel.org: ICMP host 1.1.1.1 unreachable, length 60
(1.1.1.1 is my WAN IP addres, which I edited for privacy reasons). This example is when downloading a kernel source tarball from kernel.org.
Everything points that, after a while (something running periodically?) the state of the connection is lost and pfSense for some reason can't recognize the CARP ip as a valid ip address.
Any help will be appreciated.