From owner-freebsd-bugs Tue Mar 25 13:40:11 1997 Return-Path: Received: (from root@localhost) by freefall.freebsd.org (8.8.5/8.8.5) id NAA11676 for bugs-outgoing; Tue, 25 Mar 1997 13:40:11 -0800 (PST) Received: (from gnats@localhost) by freefall.freebsd.org (8.8.5/8.8.5) id NAA11649; Tue, 25 Mar 1997 13:40:06 -0800 (PST) Resent-Date: Tue, 25 Mar 1997 13:40:06 -0800 (PST) Resent-Message-Id: <199703252140.NAA11649@freefall.freebsd.org> Resent-From: gnats (GNATS Management) Resent-To: freebsd-bugs Resent-Reply-To: FreeBSD-gnats@freefall.FreeBSD.org, Received:(from nobody@localhost) by.freefall.freebsd.org.id.NAA11008;Tue; (8.8.5/8.8.5);, 25 Mar 1997 13:32:55.-0800 (PST) Message-Id: <199703252132.NAA11008@freefall.freebsd.org> Date: Tue, 25 Mar 1997 13:32:55 -0800 (PST) From: spatula@gulf.net To: freebsd-gnats-submit@freebsd.org X-Send-Pr-Version: www-1.0 Subject: kern/3100: IPFW panics upon denying a packet Sender: owner-bugs@freebsd.org X-Loop: FreeBSD.org Precedence: bulk >Number: 3100 >Category: kern >Synopsis: IPFW panics upon denying a packet >Confidential: no >Severity: non-critical >Priority: medium >Responsible: freebsd-bugs >State: open >Class: sw-bug >Submitter-Id: current-users >Arrival-Date: Tue Mar 25 13:40:03 PST 1997 >Last-Modified: >Originator: Nick Johnson >Organization: Gulf Coast Internet Company >Release: 2.2-RELEASE >Environment: FreeBSD blowfish.office.gulf.net 2.2-RELEASE FreeBSD 2.2-RELEASE #0: Tue Mar 18 10:43:58 CST 1997 root@blowfish.office.gulf.net:/usr/src/sys/compile/N2 i386 >Description: When machines configured with ipfw receive a packet that would be denied, the kernel panics. The problem also exists in 3.0 snap, but not in 2.1.x >How-To-Repeat: Compile ipfw support into the kernel and do something like this: ipfw -f flush ipfw add allow all from xxx.xxx.xxx.xxx to any ipfw deny icmp from any to xxx.xxx.xxx.xxx ping freebsd.org Upon receiving the returning icmp packet, the kernel will bomb. >Fix: unknown. A workaround is to not deny packets. >Audit-Trail: >Unformatted: