From owner-freebsd-pf@FreeBSD.ORG  Thu Aug 11 16:09:52 2005
Return-Path: <owner-freebsd-pf@FreeBSD.ORG>
X-Original-To: freebsd-pf@freebsd.org
Delivered-To: freebsd-pf@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id 4089316A41F
	for <freebsd-pf@freebsd.org>; Thu, 11 Aug 2005 16:09:52 +0000 (GMT)
	(envelope-from me@hexren.net)
Received: from helium.webpack.hosteurope.de (helium.webpack.hosteurope.de
	[217.115.142.90])
	by mx1.FreeBSD.org (Postfix) with ESMTP id E455743D55
	for <freebsd-pf@freebsd.org>; Thu, 11 Aug 2005 16:09:51 +0000 (GMT)
	(envelope-from me@hexren.net)
Received: by helium.webpack.hosteurope.de running Exim 4.51 using esmtpa
	from p548ccaef.dip.t-dialin.net ([84.140.202.239]
	helo=hexren.steenbuck.net)
	id 1E3Fcr-00045c-U8; Thu, 11 Aug 2005 18:09:50 +0200
Date: Thu, 11 Aug 2005 18:09:49 +0200
From: Hexren <me@hexren.net>
X-Mailer: The Bat! (v1.62i) Business
X-Priority: 3 (Normal)
Message-ID: <715586652.20050811180949@hexren.net>
To: freebsd-pf@freebsd.org
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
Subject: Bug Report (system crash with GRE and NAT)
X-BeenThere: freebsd-pf@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
Reply-To: Hexren <me@hexren.net>
List-Id: "Technical discussion and general questions about packet filter
	\(pf\)" <freebsd-pf.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-pf>,
	<mailto:freebsd-pf-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-pf>
List-Post: <mailto:freebsd-pf@freebsd.org>
List-Help: <mailto:freebsd-pf-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-pf>,
	<mailto:freebsd-pf-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Thu, 11 Aug 2005 16:09:52 -0000

We tried to run NAT on GRE sessions. That failed with more than 1 host
in the NATed network using GRE. ( GRE NAT is after all not really
supported as far as I can see,so no big surprise here)
The unfortunate thing that I would call a bug is that the gateway did
not fail gracefuly (dropping the sessions involved) but died completly to the
point where only power cycling brought it back.


Kind Regards and thanks for the work that goes into making pf
work under FreeBSD.

Oliver Steenbuck