When doing 1 to 1 nating I am getting a lot of dropped packets

Posted on 2014-09-02
Last Modified: 2014-11-22
Ok I am having a problem with my internet and I have gone on with our internet provider for over a year and they are down to it is something with our equipment not on their side.  Here is what is going on we use Cox Communications for our cable internet we have 150Mbps download and 20Mbps upload.  We are trying to use an untangle box for the router and I am trying to do 1to1 nating on it from 3 internal ips to 3 external ips.  I also have to ports forwarded from the external ips to the internal ips.  we had this same setup with an sa520 before and it worked just fine then about a year ago we had problems and we though it was the router because we have had problems with the router at other sites so I put the untangle in place.  if I have a switch on the cable modem hooked up to 3 seperate routers with each one having the external ip and set the server to use it as a gateway then it works just fine but if I try to use just the untangle box to do all the routing then we get random packet drops.  what I have done to test this is ping the gateway on cox's side and also ping the modem ip and when the pings drop to the gateway at cox they do not drop to the modem and to make it drop even more if I do a speed test as soon as it hit the upload side of the test we get 5 to 6 pings dropped and the test will not go through or show an upload speed of like 1Mbps if we are lucky.  Cox tried a netscreen router which they say they do what I am trying to do with those all the time and when we hooked our network up to it it had the same results.  They say when we hook the untangle up to do all the routing it is not doing broadcast packet filtering or they say it could be a DOS fuction problem.  But either way they say it is not anything on their end it is something with our equipment.

Sorry for the long rant but I wanted to try to say everything we tried if anybody has any ideas please let me know
Question by:grevels
    LVL 9

    Expert Comment

    uploading has to do with ftp ports maybe partially open from memory of using untangle. Untangle out of the box is an half open system, by default. try opening the ftp ports

    Author Comment

    if you can explain where to open ftp because the only thing I can see to do is to just forward an ftp port I don't see a way to just open it

    Accepted Solution

    ok after a year of battling with Cox on this problem and them saying it was our equipment about 3 months after I gave up for a little while. we had a client all of a sudden just like us start having this problem put 3 separate routers in and it worked fine.  2 days after reporting this to Cox they magically found a fix and asked that client to put it back the way it was and see if it is fixed which after I did it worked fine.  So I decided to put our network back the way we had it originally before we had the problem and guess what it worked just fine.  So it was something on Cox's side and it took 2 companies having the same problem for them to fix it.

    Author Closing Comment

    Because it ended up being a problem with the provider not us

    Write Comment

    Please enter a first name

    Please enter a last name

    We will never share this with anyone.

    Featured Post

    Threat Intelligence Starter Resources

    Integrating threat intelligence can be challenging, and not all companies are ready. These resources can help you build awareness and prepare for defense.

    Quality of Service (QoS) options are nearly endless when it comes to networks today. This article is merely one example of how it can be handled in a hub-n-spoke design using a 3-tier configuration.
    If you're not part of the solution, you're part of the problem.   Tips on how to secure IoT devices, even the dumbest ones, so they can't be used as part of a DDoS botnet.  Use PRTG Network Monitor as one of the building blocks, to detect unusual…
    Viewers will learn how to connect to a wireless network using the network security key. They will also learn how to access the IP address and DNS server for connections that must be done manually. After setting up a router, find the network security…
    Here's a very brief overview of the methods PRTG Network Monitor ( offers for monitoring bandwidth, to help you decide which methods you´d like to investigate in more detail.  The methods are covered in more detail in o…

    737 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    22 Experts available now in Live!

    Get 1:1 Help Now