From owner-freebsd-bugs@FreeBSD.ORG Thu Apr 14 07:20:23 2005 Return-Path: Delivered-To: freebsd-bugs@hub.freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 1DCB016A4CF for ; Thu, 14 Apr 2005 07:20:23 +0000 (GMT) Received: from freefall.freebsd.org (freefall.freebsd.org [216.136.204.21]) by mx1.FreeBSD.org (Postfix) with ESMTP id C059543D1F for ; Thu, 14 Apr 2005 07:20:22 +0000 (GMT) (envelope-from gnats@FreeBSD.org) Received: from freefall.freebsd.org (gnats@localhost [127.0.0.1]) by freefall.freebsd.org (8.13.3/8.13.3) with ESMTP id j3E7KMnO024966 for ; Thu, 14 Apr 2005 07:20:22 GMT (envelope-from gnats@freefall.freebsd.org) Received: (from gnats@localhost) by freefall.freebsd.org (8.13.3/8.13.1/Submit) id j3E7KMU5024965; Thu, 14 Apr 2005 07:20:22 GMT (envelope-from gnats) Resent-Date: Thu, 14 Apr 2005 07:20:22 GMT Resent-Message-Id: <200504140720.j3E7KMU5024965@freefall.freebsd.org> Resent-From: FreeBSD-gnats-submit@FreeBSD.org (GNATS Filer) Resent-To: freebsd-bugs@FreeBSD.org Resent-Reply-To: FreeBSD-gnats-submit@FreeBSD.org, John Wehle Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id C499E16A4CE for ; Thu, 14 Apr 2005 07:16:07 +0000 (GMT) Received: from www.freebsd.org (www.freebsd.org [216.136.204.117]) by mx1.FreeBSD.org (Postfix) with ESMTP id A060343D31 for ; Thu, 14 Apr 2005 07:16:07 +0000 (GMT) (envelope-from nobody@FreeBSD.org) Received: from www.freebsd.org (localhost [127.0.0.1]) by www.freebsd.org (8.13.1/8.13.1) with ESMTP id j3E7G7B3004981 for ; Thu, 14 Apr 2005 07:16:07 GMT (envelope-from nobody@www.freebsd.org) Received: (from nobody@localhost) by www.freebsd.org (8.13.1/8.13.1/Submit) id j3E7G7hK004980; Thu, 14 Apr 2005 07:16:07 GMT (envelope-from nobody) Message-Id: <200504140716.j3E7G7hK004980@www.freebsd.org> Date: Thu, 14 Apr 2005 07:16:07 GMT From: John Wehle To: freebsd-gnats-submit@FreeBSD.org X-Send-Pr-Version: www-2.3 Subject: kern/79895: 5.4-RC2 breaks ipfilter NAT when using netgraph X-BeenThere: freebsd-bugs@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: Bug reports List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 14 Apr 2005 07:20:23 -0000 >Number: 79895 >Category: kern >Synopsis: 5.4-RC2 breaks ipfilter NAT when using netgraph >Confidential: no >Severity: serious >Priority: medium >Responsible: freebsd-bugs >State: open >Quarter: >Keywords: >Date-Required: >Class: sw-bug >Submitter-Id: current-users >Arrival-Date: Thu Apr 14 07:20:22 GMT 2005 >Closed-Date: >Last-Modified: >Originator: John Wehle >Release: 5.4-RC2 >Organization: Personal >Environment: FreeBSD carmen.FEITH.COM 5.4-RC2 FreeBSD 5.4-RC2 #0: Thu Apr 14 00:43:38 EDT 2005 root@wagner.FEITH.COM:/usr/obj/usr/src/sys/CARMEN i386 >Description: Using mpd on FreeBSD 5.3 to VPN into work ipnat.rules containing: map fxp0 192.168.1.0/24 -> 0/32 portmap tcp/udp 40000:60000 map ng0 192.168.1.0/24 -> 0/32 portmap tcp/udp 40000:60000 network diagram: cable modem <-> fxp0 carmen fxp1 192.168.1.1 <-> 192.168.1.2 wagner I can login from wagner into a machine at work ... the packets go from wagner to carmen fxp1 to ng0 out fxp0 to the machine at work. Running tcpdump -i ng0 -n on carmen shows the packets have been nat'd. Upgraded the machine to FreeBSD 5.4-RC2 and the nat'ng no longer happens. The tcpdump shows the packets going out ng0 with the private IP address of 192.168.1.2. Move /boot/kernel.old to /boot/kernel, rebooted, and things worked again. >How-To-Repeat: Setup the above configuration. >Fix: >Release-Note: >Audit-Trail: >Unformatted: