Date: Thu, 14 Apr 2005 07:16:07 GMT From: John Wehle <john@feith.com> To: freebsd-gnats-submit@FreeBSD.org Subject: kern/79895: 5.4-RC2 breaks ipfilter NAT when using netgraph Message-ID: <200504140716.j3E7G7hK004980@www.freebsd.org> Resent-Message-ID: <200504140720.j3E7KMU5024965@freefall.freebsd.org>
next in thread | raw e-mail | index | archive | help
>Number: 79895 >Category: kern >Synopsis: 5.4-RC2 breaks ipfilter NAT when using netgraph >Confidential: no >Severity: serious >Priority: medium >Responsible: freebsd-bugs >State: open >Quarter: >Keywords: >Date-Required: >Class: sw-bug >Submitter-Id: current-users >Arrival-Date: Thu Apr 14 07:20:22 GMT 2005 >Closed-Date: >Last-Modified: >Originator: John Wehle >Release: 5.4-RC2 >Organization: Personal >Environment: FreeBSD carmen.FEITH.COM 5.4-RC2 FreeBSD 5.4-RC2 #0: Thu Apr 14 00:43:38 EDT 2005 root@wagner.FEITH.COM:/usr/obj/usr/src/sys/CARMEN i386 >Description: Using mpd on FreeBSD 5.3 to VPN into work ipnat.rules containing: map fxp0 192.168.1.0/24 -> 0/32 portmap tcp/udp 40000:60000 map ng0 192.168.1.0/24 -> 0/32 portmap tcp/udp 40000:60000 network diagram: cable modem <-> fxp0 carmen fxp1 192.168.1.1 <-> 192.168.1.2 wagner I can login from wagner into a machine at work ... the packets go from wagner to carmen fxp1 to ng0 out fxp0 to the machine at work. Running tcpdump -i ng0 -n on carmen shows the packets have been nat'd. Upgraded the machine to FreeBSD 5.4-RC2 and the nat'ng no longer happens. The tcpdump shows the packets going out ng0 with the private IP address of 192.168.1.2. Move /boot/kernel.old to /boot/kernel, rebooted, and things worked again. >How-To-Repeat: Setup the above configuration. >Fix: >Release-Note: >Audit-Trail: >Unformatted:
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200504140716.j3E7G7hK004980>