Re: ICMP checksum error through NAT ?

This is a discussion on Re: ICMP checksum error through NAT ? within the IPFilter forums, part of the System Security and Security Related category; This is an OpenPGP/MIME signed message (RFC 2440 and 3156) --------------enig5BCFC9298B979676D49B2096 Content-Type: text/plain; charset=ISO-8859-1 ...


Go Back   Usenet Forums > System Security and Security Related > IPFilter

FAQ Members List Calendar Search Today's Posts Mark Forums Read
  #1 (permalink)  
Old 08-27-2007
Phil Dibowitz
 
Posts: n/a
Default Re: ICMP checksum error through NAT ?

This is an OpenPGP/MIME signed message (RFC 2440 and 3156)
--------------enig5BCFC9298B979676D49B2096
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: quoted-printable

Chris Ross wrote:
> A good thought, but not the case. First off, the interfaces I'm usin=

g
> are
> all VLAN'd sub-interfaces of my ethernet controller. I don't know if y=

ou
> can use the hardware check-summing in that case. And, if you can, I
> haven't enabled it. The external interface, and it's physical parent, =

look
> as follows:


I don't see why the vlan's wouldn't allow it, it's still the same hardwar=
e.
And it's not a "I haven't turned it on" its more of a "have I turned it o=
ff"
for most hardware. Try adding:

set ip:dohwcksum=3D0

to /etc/system and reboot. If you still have the problem, you can
definitively say it's not hardware checksumming.

--=20
Phil Dibowitz phil@ipom.com
Open Source software and tech docs Insanity Palace of Metallica
http://www.phildev.net/ http://www.ipom.com/

"Never write it in C if you can do it in 'awk';
Never do it in 'awk' if 'sed' can handle it;
Never use 'sed' when 'tr' can do the job;
Never invoke 'tr' when 'cat' is sufficient;
Avoid using 'cat' whenever possible" -- Taylor's Laws of Programming



--------------enig5BCFC9298B979676D49B2096
Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: OpenPGP digital signature
Content-Disposition: attachment; filename="signature.asc"

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFG0iXdN5XoxaHnMrsRAqOSAJ9x/51Jj4ARJHOrZFHgSMqwibrvxwCfbxvG
WWzatg9F7/7bUsuhR9BGxsI=
=zXyd
-----END PGP SIGNATURE-----

--------------enig5BCFC9298B979676D49B2096--
Reply With Quote
Reply
Thread Tools Search this Thread
Search this Thread:

Advanced Search
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are Off
[IMG] code is Off
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On



All times are GMT +1. The time now is 05:05 PM.


Powered by vBulletin® Version 3.7.3
Copyright ©2000 - 2008, Jelsoft Enterprises Ltd.
Content Relevant URLs by vBSEO 3.0.0