> Source: [sk98169](https://support.checkpoint.com/results/sk/sk98169)

# sk98169 - "Connection contains real IP of NATed address" log in SmartView Tracker for dropped traffic

| Property | Value |
|----------|-------|
| Solution ID | sk98169 |
| Date Created | 2014-01-27 |
| Last Modified | 2020-08-20 |
| Technical Level | Advanced |
| Products | Security Gateway |
| Versions | R82.10, R82, R81.20 |

## Symptoms

- * "`Connection contains real IP of NATed address`" log in SmartView Tracker for dropped traffic.

* Kernel debug ('`fw ctl debug -m fw + drop conn vm nat xlate xltrc `') shows:

  ```
  
  ;FW-1: fw_log_bad_conn_ex: reason Connection contains real IP of NATed address; 
  ;fw_conn_inspect: post lookup verification failed. Dropping packet; 
  ;fw_log_drop: Packet proto= ... dropped by fw_conn_inspect Reason: post lookup verification failed;
  ;fw_filter_chain: fw_conn_inspect returned action VANISH; 
  ;fw_filter_chain: Final switch, action=VANISH;
  ;After VM: (len=...)
  ;VM Final action=VANISH
  ; ----- Stateful VM inbound Completed -----
  ```

  **Note: It is always recommended to run the kernel debug during a scheduled maintenance
  window in order to minimize the impact on production traffic and on users.**
* Kernel debug ('`fw ctl debug -m fw + drop`') shows:

  `;fw_log_drop: Packet proto= ... dropped by fw_handle_first_packet Reason: fwconn_key_init_links (INBOUND) failed;`

## Cause

* **Reason: post lookup verification failed**

  Security Gateway cannot match backward connection on one of the created symbolic links in Connections Table, since connection was matched on more than one NAT rule.   

* **Reason: fwconn_key_init_links (INBOUND) failed**

  Security Gateway cannot create a link for the specific connection since some link for previous connection is stuck in Connections Table.

## Solution

This solution requires authentication. Please log in to view the full solution.

---

# Agent Instructions

This content is from the Check Point Support Center (https://support.checkpoint.com), the official knowledge base for Check Point cybersecurity products.

## Navigating This Knowledge Base

- **Complete index**: [llms.txt](https://support.checkpoint.com/llms.txt)
- **All SK articles**: [SecureKnowledge Sitemap](https://support.checkpoint.com/sitemaps/secureknowledge-sitemap-index.xml)
- **SK article URL pattern**: `https://support.checkpoint.com/results/sk/{skId}`
- **Markdown responses**: AI bot User-Agents automatically receive `text/markdown` content