From owner-freebsd-bugs@FreeBSD.ORG  Fri Dec 23 02:00:20 2005
Return-Path: <owner-freebsd-bugs@FreeBSD.ORG>
X-Original-To: freebsd-bugs@hub.freebsd.org
Delivered-To: freebsd-bugs@hub.freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id 5DA5416A41F
	for <freebsd-bugs@hub.freebsd.org>;
	Fri, 23 Dec 2005 02:00:20 +0000 (GMT)
	(envelope-from gnats@FreeBSD.org)
Received: from freefall.freebsd.org (freefall.freebsd.org [216.136.204.21])
	by mx1.FreeBSD.org (Postfix) with ESMTP id 3307B43D5E
	for <freebsd-bugs@hub.freebsd.org>;
	Fri, 23 Dec 2005 02:00:19 +0000 (GMT)
	(envelope-from gnats@FreeBSD.org)
Received: from freefall.freebsd.org (gnats@localhost [127.0.0.1])
	by freefall.freebsd.org (8.13.4/8.13.4) with ESMTP id jBN20JLI029708
	for <freebsd-bugs@freefall.freebsd.org>; Fri, 23 Dec 2005 02:00:19 GMT
	(envelope-from gnats@freefall.freebsd.org)
Received: (from gnats@localhost)
	by freefall.freebsd.org (8.13.4/8.13.4/Submit) id jBN20JUf029707;
	Fri, 23 Dec 2005 02:00:19 GMT (envelope-from gnats)
Resent-Date: Fri, 23 Dec 2005 02:00:19 GMT
Resent-Message-Id: <200512230200.jBN20JUf029707@freefall.freebsd.org>
Resent-From: FreeBSD-gnats-submit@FreeBSD.org (GNATS Filer)
Resent-To: freebsd-bugs@FreeBSD.org
Resent-Reply-To: FreeBSD-gnats-submit@FreeBSD.org,
	Stefan `Sec` Zehl <sec@42.org>
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id 7A9CB16A41F
	for <FreeBSD-gnats-submit@freebsd.org>;
	Fri, 23 Dec 2005 01:58:24 +0000 (GMT) (envelope-from sec@42.org)
Received: from ice.42.org (ice.42.org [194.77.85.2])
	by mx1.FreeBSD.org (Postfix) with ESMTP id 0223643D5D
	for <FreeBSD-gnats-submit@freebsd.org>;
	Fri, 23 Dec 2005 01:58:23 +0000 (GMT) (envelope-from sec@42.org)
Received: by ice.42.org (Postfix, from userid 1000)
	id 9631054A3; Fri, 23 Dec 2005 00:54:05 +0100 (CET)
Message-Id: <20051222235405.9631054A3@ice.42.org>
Date: Fri, 23 Dec 2005 00:54:05 +0100 (CET)
From: Stefan `Sec` Zehl <sec@42.org>
To: FreeBSD-gnats-submit@FreeBSD.org
X-Send-Pr-Version: 3.113
Cc: 
Subject: kern/90834: ipfw fwd host,port is broken with udp
X-BeenThere: freebsd-bugs@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
Reply-To: Stefan `Sec` Zehl <sec@42.org>
List-Id: Bug reports <freebsd-bugs.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-bugs>,
	<mailto:freebsd-bugs-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-bugs>
List-Post: <mailto:freebsd-bugs@freebsd.org>
List-Help: <mailto:freebsd-bugs-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-bugs>,
	<mailto:freebsd-bugs-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Fri, 23 Dec 2005 02:00:20 -0000


>Number:         90834
>Category:       kern
>Synopsis:       ipfw fwd host,port is broken with udp
>Confidential:   no
>Severity:       non-critical
>Priority:       low
>Responsible:    freebsd-bugs
>State:          open
>Quarter:        
>Keywords:       
>Date-Required:
>Class:          sw-bug
>Submitter-Id:   current-users
>Arrival-Date:   Fri Dec 23 02:00:18 GMT 2005
>Closed-Date:
>Last-Modified:
>Originator:     Stefan `Sec` Zehl
>Release:        FreeBSD 5.4-STABLE i386
>Organization:
>Environment:
System: FreeBSD elvis 5.4-STABLE FreeBSD 5.4-STABLE #8: Wed Oct 26 12:55:13 CEST 2005     root@elvis:/usr/obj/usr/src/sys/ELVIS  i386


	
>Description:

Redirecting udp packets to a different local port with "ipfw fwd" fails.
The rule is matched (the counter in "ipfw show") increases, but the packet is
still delivered to the original port and thus generates an icmp packet if
nothin is listening there.

	
>How-To-Repeat:

ipfw add 100 fwd 10.1.1.3,8053 udp from any to 10.1.1.3 53
nc -vvul 10.1.1.3 8053

from another host

nc -vvu 10.1.1.3 53
<enter text>

Results in an icmp port unreachable, no text is received on the listening
netcat instance

	
>Fix:

	


>Release-Note:
>Audit-Trail:
>Unformatted: