Yes, you're right, the solution is the use ethtool in the domU domain to
disable checksum offloading. I didn't expect it was related to Xen, so
that's why I asked here.
Thanks for the pointer.
Jan
Tom Eastep wrote:
On Wednesday 05 April 2006 08:51, Jan den Ouden (ml) wrote:
Hi,
I'm seeing a strange problem with kernel 2.6.12 Xen domain0 with all
netfilter options compiled in. I'm trying to do port forwarding to an
internal machine from an internet gateway box.
What works ok is forwarding from gateway:143 to internalmachine:143.
But when I forward from gateway:1000 to internalmachine:143 I get bad
TCP checksums on the return packets. These packets are ignored on the
client machine on the external internet.
I suggest that you search the Xen-users list archives -- this issue has been
discussed ad nauseum.
-Tom
