Re: Patch for pfil 2.1.5 Solaris unsafe pointer arithmetic

[Jorgen Lundman]

Damn, I messed up, its 3 am after all..
Jorgen Lundman wrote:
I applied three patches from John, and I found:
!     while ((len = m->b_rptr - m->b_wptr) <= off) {
This way, it doesn't NAT anything at all. Just don't work.
That actually works, and works well I just stuffed it up when I installed it. 
Traceroute works fine too. No panic yet.

Staying with the John patch for now.

Side note on rdr/round-robin.
I can not add another entry with the same IP (but different port) to the same 
source RDR/port it seems. I am guessing this is intentional?

Ie:
ipnat -f -
rdr iprb1 0.0.0.0/0 port 2525 -> 192.168.38.99 port 25 tcp round-robin
rdr iprb1 0.0.0.0/0 port 2525 -> 192.168.38.99 port 26 tcp round-robin
2:ioctl(add/insert nat rule): File exists
But:
ipnat -f -
rdr iprb1 0.0.0.0/0 port 2525 -> 192.168.38.99 port 25 tcp round-robin
rdr iprb1 0.0.0.0/0 port 2526 -> 192.168.38.99 port 26 tcp round-robin
.. is ok.
I was just trying to cheat in my testing by running multiple instances on 
multiple machines :)

Lund
--
Jorgen Lundman       | <[EMAIL PROTECTED]>
Unix Administrator   | +81 (0)3 -5456-2687 ext 1017 (work)
Shibuya-ku, Tokyo    | +81 (0)90-5578-8500          (cell)
Japan                | +81 (0)3 -3375-1767          (home)