I do notice two things:
1: It doesn't seem to send packets when loading an internet page using Windows 95's Internet Explorer? Arachne on MS-DOS does seem to send DNS packets, which the server wraps in an ethernet packets(source MAC=Virtual MAC, Destination MAC=Default Gateway MAC(both MAC addresses are configured in the server's settings file).
2: The incoming filter receives lots of packets, filters out only IP packets(type 0x800), where the destination MAC within the ethernet header is matching the set Virtual MAC.
The packets to/from the network are sent using pcap(with Ethernet header(src/mac as configured, type 0x800) slapped on when sending and stripped off when receiving).
The packets to/from the connected client(e.g. Dosbox running Windows 95 or Arachne) are encrypted(when sending to the client) or decrypted(when receiving packets to send from the client) in SLIP format.
I constantly see the Windows 95 internet connection status window increase it's received byte count, while the sent byte count barely increases.
Anyone knows why the IP packets aren't getting through properly? Is something else still needed for it to work?
The only things that don't happen to be encrypted in SLIP format to the client is the authentication process(which hangs up when failing(invalid username/password/protocol supplied) and discards receiving packets from pcap until sending the CONNECTED message(after authentication passes and basic MAC addresses are conveyed to the client in ASCII text format).
Windows 95 connects properly using the login script, but doesn't seem to properly receive the packets?
Is it a problem I'm sending all received packets (only filtering on MAC address and IPv4 packet type)?