Very Strange Problem With NAT in UDP

  • Hello, today I've seen a big problem with NAT in PFSENSE 2.0.3. My pfsense had a complex configuration but I'm sure that problem will exist in any kind of PFSENSE in these release.

    The problem is about NAT and UDP traffic

    1 WAN IP
    1 LAN IP

    In NAT I put all traffic with ip destination udp port 6000 –> redirect to, I put also in firewall rule a log

    If I try outside this rule. It works good. But I encountered one situation that it not works:

    If are inside ( and outside ( a with a udp program:
    sent udp datagram from udpsrc=6000 to udpdst=3710
    and with less than 5 secons you send another udp datagram from udpdst=3710 to udpsrc=6000 then the second datagram is logged in firewall with pass but router doens't do the NAT(datagram is not leavin out from LAN nic) (I don't understand why??????)

    I tried a lot of things and I can explain that:

    If you did the same but the answer from is from another udpsrc diferent that form I request before then the nat rule logs and works correctly.

    If you wait some time before answer (not answer in few seconds), then with the same datagram and ports it works.

    Thanks a lot

Log in to reply