Re: RE: Upgrading 1.2 to 1.3
Chris Buechler <[email protected]>
| Newsgroups | gmane.comp.security.firewalls.m0n0wall |
|---|---|
| Message-ID | <[email protected]> |
On Sat, Jul 17, 2010 at 12:38 AM, Steve Yates <[email protected]> wrote: > Chris Buechler wrote on Fri, Jul 16 2010 at 8:49 pm: > >>> Well that fails spectacularly too. When I enable 1:1 NAT using a public IP as >> the external, and a private IP as the internal, all communication past the ISP's >> router seems to stop. >> >> Likely ARP cache on the ISP's router, and/or missing proxy ARP. > > Maybe but it's not like I was adding new IPs. Maybe it was just confused over the change in MAC addresses for the IP? Not confused, that's the expected behavior when an IP changes MACs, the ISP router had the previous MAC cached. Default ARP cache timeout is several hours on most routers (4 hours on Cisco).