Subject: ipfilter - nat problem
To: None <current-users@netbsd.org>
From: ERIK <ebe-list@get2net.dk>
List: current-users
Date: 02/19/2005 16:20:43
A couple of days ago there was a discussion about NAT not
working after the ipfilter update.
I'm not sure whether it is the ipfilter upgrade or the
recent header file shuffling that is the culprit, but I
have the problem as well: no connections are ever
established out of my nat box (even after removing
obj.i386 and doing a full build).
But today I have observed the following tcpdump output on
the external interface on my nat machine:
16:08:11.990717 IP truncated-ip - 24480 bytes missing!
192.168.22.105.netbios-ns > (external host)
16:08:29.559769 IP truncated-ip - 15300 bytes missing!
192.168.22.2 > (another external host): tcp
The last entry is seen when trying to do an slogin from an
internal machine, and the length of 15300+ looks very
suspect.
- Erik Bertelsen