[prev in list] [next in list] [prev in thread] [next in thread] 

List:       ipfilter
Subject:    Re: ipfilter nat failure
From:       Hans Werner Strube <strube () physik3 ! gwdg ! de>
Date:       2005-11-04 13:50:14
Message-ID: 200511041350.OAA19296 () r2d2 ! physik3 ! gwdg ! de
[Download RAW message or body]

Murray Thomson wrote:
> Interfaces
> 
> bge0 off
> bge1 Internet pppoe
> sppp0 dynamic address
> bge3 192.168.128.1
> bge3:1 10.0.1.1
> 
> I have tried to get out from both the 10.0.1 subnet and the  192.168.128
> subnet. In both cases the data goes out but does not  translate.

As you have bge interfaces: these use hardware checksumming, which is
known to cause NAT trouble in Solaris IPF. Try whether the following helps:
add a line to /etc/system:
set ip:dohwcksum=0
and reboot.
[prev in list] [next in list] [prev in thread] [next in thread]