On Mon, Jul 21, 2014 at 11:05:54PM +0200, Alexander Bluhm wrote:
What application do you run on tun? aiccu?

Yes, aiccu.

Are the packets forwarded or locally generated?

Forwarded.

Where and how do you measure the checksum 0?

At either the firewall as the packets exit, or at the remote end.

Can you provide tpcdump -X before and after the tunnel encapsulation?

Sending directly.

On which interface do you redirect?

At this point I'm using a rule like this:

pass in proto udp to [DADDR] port [DPORT] rdr-to [OTHERADDR] port [OTHERPORT]

Are those incomming packets on tun?

The route is symmetric (so the requests from a local vlan come in directly over the vlan interface, the external requests pass through the tun).

Mike Stone

Reply via email to