SNAT problem in Firmware 9.707.

Hi,

Someone have problems with SNAT? SNAT ( Hide NAT ) from LAN to Internet.

After PPP interface is reconnected and received new / different IPv4 address, the UTMv9 is still using the old IPv4 address for old sessions ( verification using tcpdump ).

Sometimes it resolves by it self ... and sometimes after restart ...

It's sporadic and I was unable to understand why it's happening.

When there is a problem, new sessions are working and SNAT is using new IPv4.

In version 9.705-3 and before worked flawlessly with the same configuration.

Is there a way to clear NAT cache?

* Unable to open a case. I'm using free UTMv9 for personal testing purposes as VM ( although license specifies that I should be able to open a case ... but it seems that this option lost in Sophos on the way ... ).  

Thank You.



Adding explanation.
[edited by: Alexey Haritonov at 2:09 PM (GMT -7) on 23 Oct 2021]
Parents
  • Shalom Alexey and welcome to the UTM Community!

    Please insert a picture of the Edit of your SNAT.

    Cheers - Bob

     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
  • Hi,

    Thank You for the reply.

    My SNAT conf:

  • Wouldn't your Internet IPv4 instead be using the External (WAN) (Address) interface?

    UTM - 9.709 | Intel Xeon 4-core v3 1225 3.20Ghz
    16GB Memory | 500GB SATA HDD | GB Ethernet x5

  • Assuming that "ISP Partner Fiber" is your external interface connected to your ISP, that should work.  UTM "culture" is to also select 'Automatic Firewall rule'.

    Instead of using an SNAT, the "standard" way to do this in UTM is with a Masquerading rule:

         

    Cheers - Bob

     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
Reply
  • Assuming that "ISP Partner Fiber" is your external interface connected to your ISP, that should work.  UTM "culture" is to also select 'Automatic Firewall rule'.

    Instead of using an SNAT, the "standard" way to do this in UTM is with a Masquerading rule:

         

    Cheers - Bob

     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
Children