Re: ipf/ipnat behavior

[Paul Goyette <paul%whooppee.com@localhost>]

On Sunday 01 June 2008 23:31:13 Darren Reed wrote:
> I believe the problem with "keep state" is now fixed with my
> most recent commit and this may also fix the NAT problems
> people were seeing... I'll do some more testing.  Please update
> your kernel with the latest version of that file.

I don't think that IPNAT is quite fixed yet.  I've just rebuilt with the 
latest change to ip_state.c and I'm still having the same problems 
accessing remote NFS-mounted file systems with ipf and ipnat enabled.

{320} head /build/src/sys/dist/ipf/netinet/ip_state.c
/*      $NetBSD: ip_state.c,v 1.32 2008/06/01 22:26:11 darrenr Exp $    */




----------------------------------------------------------------------
|   Paul Goyette   | PGP DSS Key fingerprint: |  E-mail addresses:   |
| Customer Service | FA29 0E3B 35AF E8AE 6651 |  paul%whooppee.com@localhost   |
| Network Engineer | 0786 F758 55DE 53BA 7731 | pgoyette%juniper.net@localhost |
----------------------------------------------------------------------