[c-nsp] FWSM v2.3.3 NAT issue

Önder Ergün (Probil-İstanbul) onder.ergun at probil.com.tr
Mon Jan 2 01:09:41 EST 2006


 Can you give your bug id please? My colleague may have seen the same issue as well.


-----Original Message-----
From: cisco-nsp-bounces at puck.nether.net [mailto:cisco-nsp-bounces at puck.nether.net] On Behalf Of Brett Looney
Sent: Monday, January 02, 2006 3:06 AM
To: cisco-nsp at puck.nether.net
Subject: Re: [c-nsp] FWSM v2.3.3 NAT issue

At 19:01 31/12/2005, you wrote:
>>As an update, the TAC have confirmed that our problem is a new bug and 
>>they're checking 2.3.2 to see if it exists there, but rolling back 
>>isn't an easy option for us - we're exploring other (non-FWSM
>>based) solutions. We don't have a workaround or an ETA on a fix yet.
>
>Sorry about the TAC-like answer, but did you give 2.3.3-INTERIM a try ?
>They have fixed quite a number of bugs since the release of 2.3.3.

I didn't even know that existed. It certainly doesn't appear on the normal download list.

>  FWSM Firewall Version 2.3(3)2 <system>  Compiled on Fri 21-Oct-05 
> 16:11 by dalecki

Well, ours is:

FWSM Firewall Version 2.3(3)
Compiled on Mon 10-Oct-05 14:50 by dalecki

so clearly we have an older version. Having said that, we didn't go looking for a particular version - we needed one that fixed all the
2.2(x) failover issues without anything else in it that would affect us and 2.3(3) fit the bill.

>In the last bugscrub (~1 month old) for 2.3.3 that I have there are no 
>entries that could be related and marked as "DDTS not fixed", maybe 
>you've found a new bug.

Yeah, that's what they tell us. Damn.

B. 

_______________________________________________
cisco-nsp mailing list  cisco-nsp at puck.nether.net https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/



More information about the cisco-nsp mailing list