Re: IPF dropping my TCP sessions

[Martti Kuparinen <martti.kuparinen%iki.fi@localhost>]

Martti Kuparinen wrote:

> I have big problems with IPF 4.1.29 on NetBSD 5.0_RC2. I had two SSH 
> sessions open and they were visible as
>
> Source IP             Destination IP         ST   PR   #pkts    
> #bytes      ttl
> 10.0.18.3,36821       xxx.xxx.xxx.130,22    4/4  tcp     213     21388  
> 3:58:26
> 10.0.18.3,45536       xxx.xxx.xxx.140,22    4/4  tcp      43      7668  
> 3:59:55
>
> Later (say 15 minutes or so, i.e. not even close to the TTL) I noticed 
> both my SSH sessions were unresponsive so I logged into the firewall and 
> and saw no state entries for my SSH sessions.
>
> Anyone else having similar problems with IPF on NetBSD 5.0?

This might in fact be ipnat related as I have no problems at work were the 
firewall is running NetBSD/amd64 5.0_RC2 but we are using public IP addresses 
and no NAT at all...

Martti