Do you have filters which block packets going *out* of the PM which are
addressed to IPs within the PM's pool?
If not:
User is working on a web site; hangs up his connection whilst the web
server is trying to send stuff. PM sees that packets are coming that it
doesn't know what to do with...it sends them back to your router, which
DOES know what to do with them: they belong to that PM, so back in they
come. Etc etc. Does wonders for ethernet traffic counts.
It can be--and has, extensively and exhaustingly, been--argued that the PM
shouldn't do that. [See the archives if you must.] Doesn't matter: it
DOES do that.
--John
-- John Baxter jwblist@olympus.net Port Ludlow, WA, USA Give a man a fish and you feed him for a day. Teach him to fish, and you get rid of him for the weekend. - To unsubscribe, email 'majordomo@livingston.com' with 'unsubscribe portmaster-users' in the body of the message. Searchable list archive: <URL:http://www.livingston.com/Tech/archive/>