I was running 2.9.29 and upgraded to 2.9.39 over the weekend.
Monday morning I noticed that our DNS lookups were failing from external sources. After much frustration I had the idea to look at the terminal source and noticed this which I thought was strange:
22 ;;; External DNS
chain=dstnat dst-address=x.x.x.x protocol=tcp dst-port=53 dst-limit=0,5,dst-address/1m40s action=dst-nat to-addresses=192.168.1.40 to-ports=53
What is dst-limit=0,5,dst-address/1m40s ?
How did it get there?? I just noticed it on a bunch of other rules too but it doesn’t seem to have any negative impact.