Thanks Darrenr,

> The problem is that IPFilter assumes that the checksum will be fixed after
> control is returned to the IP code.

OK I have assumed that.

> The obvious solution is to have the bridge recalculate the IP header
> checksum after every packet comes back from ipfilter to send out.

Not so obvious for me, but I'll look at it after holidays.

Bests,

olivier

Reply via email to