der Mouse wrote:
> Well, I put a debugging printf in icmp_reflect, and the reflected
> packet is being passed to ip_output with ip_src set to the "inside"
> address of the gateway and ip_dst set to the "outside" address, as
> described.
>
> You're right that I got myself confused about input and output NAT
> processing; this theory doesn't look as plausible in view of the code
> as it did when I wrote that last night (ENOSLEEP or some such).  But
> I'm not sure how to explain the addresses the packet bears, then.  I
> suppose I need to throw in a bunch more debugging info.
>
>   
check if the copy in ip_forward does really copy the beginning of the 
packet. An old bug was that it didn't handle m_clusters correctly.