Re: NAT problems 14.3+

On 21.04.2026 17:38, Rob Bloemers wrote:
> I have a machine with a public interface, which i put in a bridge to share with jails to use public ip addresses. And a private bridge for internal LAN (10.10.2.0/24, 10.10.2.1 configured on the bridge) of some jails.
> 
> wanif="ice0"
> 
> # Configure NAT-WAN interface
> ipfw -q nat 1 config if $wanif log reset same_ports
> 
> # Check inbound traffic for redirections
> $cmd 00006 nat 1 ip from any to me in via $wanif
> 
> /etc/rc.conf
> ```
> hostname="probably.doing.something.wrong.tld"
> ifconfig_ice0="DHCP"
> ifconfig_ice0_ipv6="inet6 accept_rtadv"
> 
> And this works fine. icmp/udp/tcp it all works as expected, and how i have been since quite a few versions of FreeBSD
> 
> icmp still works, udp (dns) too, though i need to change from the ISP dns to 1.1.1.1 (which is a bit odd). But tcp nothing seems to work anymore.
> 

Did you try to disable TSO on the ice0 interface?

-- 
WBR, Andrey V. Elsukov