pfSense Forum

pfSense English Support => NAT => Topic started by: Cactus on January 05, 2012, 11:44:52 am

Title: 2.0.1 1-1 NAT presenting external interface rather than real IP
Post by: Cactus on January 05, 2012, 11:44:52 am
Since i've upgraded to 2.0.1, the 1-1 NAT that was used for email no longer presents the real IP of the user that is sending the email.

Instead the mail server sees the external IP of the pfsense box instead, and with the mail server blocking connections based on where a user connects from it no longer works correctly.

I've currently had to quickly revert to another gateway to nat correctly.

If i setup a PAT it also does the same thing.

Any suggestions?

Thanks
Title: Re: 2.0.1 1-1 NAT presenting external interface rather than real IP
Post by: marcelloc on January 05, 2012, 06:54:38 pm
Can you see if both servers has the same outbound nat settings?
Title: Re: 2.0.1 1-1 NAT presenting external interface rather than real IP
Post by: cmb on January 05, 2012, 09:36:17 pm
Upgraded from what version? 1:1 hasn't changed in a long time and works fine, not much to it. The host can get out but goes out on the wrong IP? Check the NAT translation in Diag>States. 1:1 overrides any matching outbound NAT.
Title: Re: 2.0.1 1-1 NAT presenting external interface rather than real IP
Post by: Cactus on January 06, 2012, 03:41:35 am
Upgraded from 2.0.0 release x32

Removed all packages which included snort, squid, darkstat and the pfsense box is back behaving as it should showing the real ip. Not sure why or if it will happen again but it's working.

Very strange indeed.

Thanks
Title: Re: 2.0.1 1-1 NAT presenting external interface rather than real IP
Post by: marcelloc on January 06, 2012, 05:16:30 am
If your mail app is a webmail then squid package with transparent proxy could be your 'problem'
Title: Re: 2.0.1 1-1 NAT presenting external interface rather than real IP
Post by: miles267 on January 07, 2012, 03:04:49 pm
Have encountered this same issue since upgrading from 2.0 release to 2.0.1 release.  were you able to figure out a resolution to this?  clearly something did change.
Title: Re: 2.0.1 1-1 NAT presenting external interface rather than real IP
Post by: cmb on January 08, 2012, 08:16:45 pm
someone who's seeing that, please email me a backup of your config with a link to this thread. cmb at pfsense dot org
Title: Re: 2.0.1 1-1 NAT presenting external interface rather than real IP
Post by: Cactus on January 09, 2012, 09:39:28 am
Personally i removed the packages mentioned and that fixed the problem.

I can only assume it was something to do with squid and a failed package upgrade (even though this said it was fine) as this is the only package which could do this reverse proxying.

To confirm this was with all ports not just smtp (25) our webserver also showed connections as coming from the external interface.