--On Tuesday, 13 February 2001 11:12 AM +0100 Manuel Bouyer wrote:

> On Tue, Feb 13, 2001 at 01:11:46AM +0100, Olaf Seibert wrote:
>> [...]
>> ipnat -slv now never shows any active sessions at all. I used the same
>> ipnat.conf and ipf.conf with 1.4.1 and it kept working all the time. Now
>> with 1.5 NAT stopped working after a few days, and as I recall, even
>> then there was never an excessive number of active sessions listed.
>>
>> Flushing my ipf rules (the default is pass) makes no difference.
>>
>> I see SYN packets coming in on the internal interface, but they never
>> make it out the externel one.
>
> OK, this was just a suggestion :)
> Maybe ipf 3.4.16 will help ?

I wonder if this is related to PR:kern/11670?

Recalling that kern/11670 also exhibited strange blocking behaviour with 
ipf after upgrading from NetBSD 1.4.1 to 1.4.3.

AFIK PR kern/11670 has not been closed.

-- 
Stephen.