[prev in list] [next in list] [prev in thread] [next in thread] 

List:       ipfilter
Subject:    Re: Solaris 9 and wscale?
From:       Darren Reed <darrenr () reed ! wattle ! id ! au>
Date:       2004-12-21 15:30:49
Message-ID: 200412211530.CAA02564 () avalon ! reed ! wattle ! id ! au
[Download RAW message or body]

In some email I received from Jorgen Lundman, sie wrote:
> Snooping on the external interface sees:
> 
> ++ With telnet, works ok:
> 
> 210.172.128.225 -> 204.152.190.12 TCP D=22 S=8198 Syn Seq=3967773248 Len=0 Win=3
> 2850 Options=<mss 1460,nop,wscale 1,nop,nop,tstamp 415741 0,nop,nop,sackOK>
> 
> ++ Via NAT, does not ever receive a reply: 
> 
> 210.172.128.225 -> 204.152.190.12 TCP D=22 S=56030 Syn Seq=3454801052 Len=0 Win=
> 65535 Options=<mss 1460,nop,wscale 6,nop,nop,tstamp 0 0>

If you watch "snoop -v" output, does it suggest that the TCP checksum
might be wrong?

Either way, try putting this in /etc/system:

set ip:dohwcksum=0

and rebooting to try NAT.

Darren
[prev in list] [next in list] [prev in thread] [next in thread]