NetBSD Problem Report #41304

From  Wed Apr 29 15:47:50 2009
Return-Path: <>
Received: from ( [])
	by (Postfix) with ESMTP id 75BA963BC62
	for <>; Wed, 29 Apr 2009 15:47:50 +0000 (UTC)
Message-Id: <>
Date: Wed, 29 Apr 2009 18:30:04 +0300 (EEST)
Subject: ipnat and ipsec don't play togheter
X-Send-Pr-Version: 3.95

>Number:         41304
>Category:       kern
>Synopsis:       ipsec + ipnat don't work in some cases
>Confidential:   no
>Severity:       non-critical
>Priority:       medium
>Responsible:    kern-bug-people
>State:          open
>Class:          sw-bug
>Submitter-Id:   net
>Arrival-Date:   Wed Apr 29 15:50:00 +0000 2009
>Originator:     Mihai Chelaru
>Release:        NetBSD 5.0


OS: NetBSD 5.0
Architecture: i386
Machine: i386

	Using a gateway with the following setup:
		2 NICs - one for inside, one for outside
		NAT from inside to outside
		IPSec tunnel mode between outside address and another network (NET_A)

	See the following behaviour:
		packets sent from local gateway to NET_A work as expected
		packets sent from inside network are reaching NET_A as expected
		packets sent from NET_A are reaching gateway but gateway is not willing to do NAT and forward them to the inside network

	a TCP handshaking on gateway outside interface looks like this:

		1. SYN sent
		2. SYN/ACK received
		3. RST sent




NetBSD Home
NetBSD PR Database Search

(Contact us) $NetBSD: query-full-pr,v 1.39 2013/11/01 18:47:49 spz Exp $
$NetBSD:,v 1.8 2006/05/07 09:23:38 tsutsui Exp $
Copyright © 1994-2007 The NetBSD Foundation, Inc. ALL RIGHTS RESERVED.