> > But why does Solaris ipfilter not handle dohwcksum=1 correctly? After all, > this parameter _is_ tested in ip_nat.c, ip_proxy.c, and solaris.c.
Most likely because they've changed the way it works. I haven't gone looking at header files or STREAMS messages yet to see what is different or wrong in IPFilter's handling of this. The problem for me with IPFilter is that this is effectively undocumented (except for the header files) so they're at liberty to change how it works without needing to worry about compatibility. I could rant here quite extensively about this issue. Darren
