Re: ipfilter nat failure

Murray Thomson wrote:
> Interfaces
>
> bge0 off
> bge1 Internet pppoe
> sppp0 dynamic address
> bge3 192.168.128.1
> bge3:1 10.0.1.1
>
> I have tried to get out from both the 10.0.1 subnet and the 192.168.128
> subnet. In both cases the data goes out but does not translate.

As you have bge interfaces: these use hardware checksumming, which is
known to cause NAT trouble in Solaris IPF. Try whether the following helps:
add a line to /etc/system:
set ip:dohwcksum=0
and reboot.