Outgoing NAT failure
msurdi last edited by
I have two pfSense (2.0RC1 built on Sat Feb 26 18:07:23 EST 2011 ) boxes in failover mode. The WAN IP address has been set as a Carp IP address and everything works fine when you browse the internet.
Until you try to do a download.
When downloading a file, after a while, it stalls. On the LAN side, with a tcpdump I can see that the server on the internet just stopped sending packets.
On the WAN side, with the capture I see that suddenly pfSense stops passing data back to the LAN client and starts sending packets like the following one to the internet server:
8:13:54.058314 IP 184.108.40.206 > pub4.kernel.org: ICMP host 220.127.116.11 unreachable, length 60
(18.104.22.168 is my WAN IP addres, which I edited for privacy reasons). This example is when downloading a kernel source tarball from kernel.org.
Everything points that, after a while (something running periodically?) the state of the connection is lost and pfSense for some reason can't recognize the CARP ip as a valid ip address.
Any help will be appreciated.