We seem to be back to bogus checksum land with ipfilter 4.1.3. This is on the latest Solaris 9 x86, fully patched (Solaris 9 9/04 s9x_u7wos_09 x86, Generic_117172-11).

From tcpdump (on the ipfilter box itself, on the outgoing (nat'd)
interface):

10:05:59.053533 IP (tos 0x0, ttl 127, id 25756, offset 0, flags [DF], length: 48, bad cksum 39a0 (->d702)!) 216.254.64.184.40007 > 166.84.0.30.25: S [tcp sum ok] 3086311442:3086311442(0) win 16384 <mss 1460,nop,nop,sackOK>

This is _with_ 'set ip:dohwcksum=0' in /etc/system.

It looks like it's the IP checksum that's bad, not the TCP checksum, if I'm reading my tcpdump correctly.

--
Carson Gaspar



Reply via email to