Skip site navigation (1)Skip section navigation (2)
Date:      Mon, 6 Dec 2004 16:46:06 GMT
From:      mike <mike@nux.co.uk>
To:        freebsd-gnats-submit@FreeBSD.org
Subject:   kern/74778: ipsec passthrough / nat-t crash freebsd firewall
Message-ID:  <200412061646.iB6Gk6pU089877@www.freebsd.org>
Resent-Message-ID: <200412061650.iB6GoIFt073009@freefall.freebsd.org>

next in thread | raw e-mail | index | archive | help

>Number:         74778
>Category:       kern
>Synopsis:       ipsec passthrough / nat-t crash freebsd firewall
>Confidential:   no
>Severity:       serious
>Priority:       medium
>Responsible:    freebsd-bugs
>State:          open
>Quarter:        
>Keywords:       
>Date-Required:
>Class:          sw-bug
>Submitter-Id:   current-users
>Arrival-Date:   Mon Dec 06 16:50:18 GMT 2004
>Closed-Date:
>Last-Modified:
>Originator:     mike
>Release:        5.3
>Organization:
na
>Environment:
FreeBSD thxgate2.thx.office 5.3-RELEASE FreeBSD 5.3-RELEASE #0: Fri Nov  5 04:19:18 UTC 2004     root@harlow.cse.buffalo.edu:/usr/obj/usr/src/sys/GENERIC  i386 
>Description:
Machine used as natted firewall running pf with multiple vlans
one vlan has 2 client machines running sonicwall to connect to a vpn server, one client can connect and establish a vpn as soon as the second client connects to the remote vpn server the freebsd firewall freezes with no messages or log info.
>How-To-Repeat:
Connect two or more sonicwall clients to a vpn server through a freebsd box running pf and natting the connection. 
>Fix:
Only allow one client to run sonicwall at the same time.
>Release-Note:
>Audit-Trail:
>Unformatted:



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200412061646.iB6Gk6pU089877>