Hello,
I’ve got problem with connection tracking. I’ve got several MK’s with specific nat rules, and when clients beyond this nat connect to my web page, I need to track that nat and get their original IP address (the source address of the original connection, which is translated by srt nat rule). For that reason, I used command like this:
:put [ /ip firewall connection get [ /ip firewall connection find reply-src-address="85.132.153.5:81" reply-dst-address="10.30.29.2:2107"] src-address]
The problem is, that on some MK’s this command works and on others it’s not working.
I’ve made a simple test on this conntrack. I connect to a device (MK or linux) thru SSH and try to find the connection I just created in conntrack. Results are:
On linux servers (debian, ubuntu): everythink OK, tried 5 servers, many retries to each of them.
On MK’s it’s very interesting. I’ve done cca 10 test’s to each MK I’ve tested. On some of them, this conntrack works every time. On others, it works almost never, but sometimes (1 or 2 success from 10 retries) it works. It behaves different even on same version of MK. Tryied several 2.9.X versions and several 3.X versions.
Does anyone knows what could cause this problem? Or does your conntrack work properly?
Thx for reply