[FW1] Extremely Strange Ping Behavior(tm)

[Jorg Weber <joerg.weber@FW1-NOSPAMjet-online.de>]

Hello everybody,

I've an odd FW-1 Problem:

Two servers are hidden with private IP-Addresses from the net via static
nat. Works all fine, but:
Somehow, every 19 packets, the subsequent 19 packets are dropped somewhere.
They are just.. lost.
A tcpdump on the FW-Box shows, for example, an echo-request arriving, and
the echo-reply going out just fine. After 19 packets, the echo-replies are
'lost', and 19 ICMP-Packets later, the replies appear again, and so on.
This is reproduceable with two machines.
I've no rulebase other than any any allow log, and I'm just NATing the two
servers to a valid IP-Address. A ping out from the systems works fine, as
does pinging each other.

Does anyone have an idea? I'm sort of lost here, as is my support :)

Thanks,
	Joerg


================================================================================
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
================================================================================