I get a lot of IP_MASQ:reverse ICMP: failed checksum from xxx.xxx.xxx.xxx but masquerading is NOT active. I mean: # ipchains -L Chain input (policy ACCEPT): Chain forward (policy ACCEPT): Chain output (policy ACCEPT): # sysctl net.ipv4.ip_forward net.ipv4.ip_forward = 0 Is it normal? What does it really mean (since can't be masquerading issue)? # uname -a uname -a Linux srv01.*******.com 2.2.16-3 #1 Mon Jun 19 19:11:44 EDT 2000 i686 unknown (ok, I know there's an update) I've found some related messages in list archives but none explain why it happens. TIA (please Cc: me, I'm not subscribed) .TM. -- ____/ ____/ / / / / Marco Colombo ___/ ___ / / Technical Manager / / / ESI s.r.l. _____/ _____/ _/ Colombo@ESI.it - : send the line "unsubscribe linux-net" in the body of a message to majordomo@vger.kernel.org