Subject: ipfilter - nat problem
To: None <current-users@netbsd.org>
From: ERIK <ebe-list@get2net.dk>
List: current-users
Date: 02/19/2005 16:20:43
A couple of days ago there was a discussion about NAT not 
working after the ipfilter update.

I'm not sure whether it is the ipfilter upgrade or the 
recent header file shuffling that is the culprit, but I 
have the problem as well: no connections are ever 
established out of my nat box (even after removing 
obj.i386 and doing a full build).

But today I have observed the following tcpdump output on 
the external interface on my nat machine:

16:08:11.990717 IP truncated-ip - 24480 bytes missing! 
192.168.22.105.netbios-ns > (external host)
16:08:29.559769 IP truncated-ip - 15300 bytes missing! 
192.168.22.2 > (another external host): tcp

The last entry is seen when trying to do an slogin from an 
internal machine, and the length of 15300+ looks very 
suspect.

- Erik Bertelsen