I removed it from the one when I pulled the ipfilter 4.1.9. Still only returning some sights. I looked at it in ethereal over the ppp interface and saw that the router is returning an icmp message that says port unavailable.

Sequence is this. PC operator asks for web page.
PC make DNS lookup request.
Packet goes to server and gets translated.
DNS responds
Sun server receives packet and responds to DNS that port is not available. I still have to go back and test this but I believe that if the sun got to the web page before then it will nat OK.

When I was using 4.1.9 I didn't have teh icmp errors but the thing just wouldn't translate.

Any ideas.

This problem never happened when I was connected through cable directly with a bge interface. It worked perfectly and quickly.

Does anybody know how to check if the state is being held.
Is there a PPP setup I need to look at.
Should I reinstall Solaris.

Murray

On 28-Oct-05, at 2:59 AM, Phil Dibowitz wrote:

Murray Thomson wrote:

I tried removing ipfilter and installing the precompiled binary, which
is where I am now. I am using version 3.4.32

This one ios wierder. It nat's but only certain web sites get through.
google.ca comes through but yahoo.com does not. What seems a  bit
interesting is that the sights that seem to get through are ones that were previously visited by a browser directly on the sun server through a sunray. In other words if I use a browser on the sun and get to a web site, I seems that I can get to that site from a PC routed through the
sun. I'll have to test that when I go out there  tomorrow.

On ipfilter 4.1.9 no packets dropped but it wouldn't nat at all.

Also at another location I installed ipfilter 3.4.32 from package the
same way I did here and it works fine.


Wow - I'm completely baffled. Jim, do you have any ideas?

Do you see anything in system logs? You don't have pfil running, do you
(that's IPF4 only)?

Does "ipf -y" help with anything?

--
Phil Dibowitz                             [EMAIL PROTECTED]
Freeware and Technical Pages              Insanity Palace of Metallica
http://www.phildev.net/                   http://www.ipom.com/

"Be who you are and say what you feel, because those who mind don't
matter and those who matter don't mind."
 - Dr. Suess



Reply via email to