hopkins35 wrote:

admin3 wrote:
Hmm, I may have seen a NAT loopback problem with 3.8.9.1 so far - what kind of HTTPS issues did you see?

I have a webserver sitting behind NAT which also hosts an L2TP VPN, Remote Desktop Gateway and various other services. I have 6 WAN aliases and one of those has redirects and firewall rules setup for said server. I also have a Fingbox network monitoring appliance which requires only outbound communication on a few ports including TCP 443 (I have no firewall restrictions on outbound traffic). After flashing 3.8.9.1 HTTPS access to my webserver completely broke - the RDP Gateway was inaccessible, my website was inaccessible but all other services including the VPN functioned fine and the Fingbox stopped communicating with the cloud and went offline also. Syslog firewall monitoring showed that the firewall was passing the traffic and I'd even added a specific rule for the Fingbox to explicitly allow its traffic outbound. I was also seeing some random web browsing and certificate errors. Interestingly the Draytek's SSL VPN continued working.

I ended up flashing the firmware 3 times, the last time was so Draytek could grab my config, and each time the same problems occurred. I've not heard anything from them in a week now

x64 wrote: Do you have any kind of IP routed subnet or your external IP range allocated to a "LAN" configuration?, or is your configuration strictly only using your public IP addresses only on the WAN interface and associated IP aliases?

Piste Basher wrote: Interesting that Draytek UK have not loaded 3.8.9.1 for the 2925 on the download site, although it's been on the international site for some time.