Core Issue
This is most likely caused by a Network Address Translation (NAT) misconfiguration, such as permitting any packets in the Access Control List (ACL) used for NAT.
Resolution
Permit only the necessary subnets to translate.
For information on NAT support, refer to the Does Cisco IOS NAT support ACLs that permit any or all packets? section of the NAT Frequently Asked Questions.