On Mon, December 5, 2005 10:16, Karoly VEGH wrote: > the interface itself is working fine: [...snip...] > I guess then this is why pfil cannot attach either... > > > Does that mean, that I will not be able to portforward from localhost? > I could do that with ssh tcpforwarding, but that feels so > quick-and-dirty workaround...
I'm not sure, someone with more ipnat+solaris skill may have an answer, but from what I've noticed this list is pretty low volume. Mostly people like us with questions, and Darren answering when he can. I have seen few others attempting to answer questions. It sounds like you may have to go that route.. have you seen: http://www.phildev.net/ipf/IPFsolaris.html Specifically: http://www.phildev.net/ipf/IPFsolaris.html#solaris12 It says basically what your admin told you, and since the interface is "fake" I'm doubtful that ipfilter or ipnat are going to be able to do anything at all with it. With that in mind, I'd say something more lightweight than ssh may work for you, any normal tcp connection bouncer. Then, add a MAP rule on hme1 so the packets don't go out with a source address of 127.0.0.1; You were going to end up needing this anyway.
