kern/79895: 5.4-RC2 breaks ipfilter NAT when using netgraph

[John Wehle]

>Number:         79895
>Category:       kern
>Synopsis:       5.4-RC2 breaks ipfilter NAT when using netgraph
>Confidential:   no
>Severity:       serious
>Priority:       medium
>Responsible:    freebsd-bugs
>State:          open
>Quarter:        
>Keywords:       
>Date-Required:
>Class:          sw-bug
>Submitter-Id:   current-users
>Arrival-Date:   Thu Apr 14 07:20:22 GMT 2005
>Closed-Date:
>Last-Modified:
>Originator:     John Wehle
>Release:        5.4-RC2
>Organization:
Personal
>Environment:
FreeBSD carmen.FEITH.COM 5.4-RC2 FreeBSD 5.4-RC2 #0: Thu Apr 14 00:43:38 EDT 2005 root at wagner.FEITH.COM:/usr/obj/usr/src/sys/CARMEN  i386 
>Description:
Using mpd on FreeBSD 5.3 to VPN into work

ipnat.rules containing:
  map fxp0 192.168.1.0/24 -> 0/32 portmap tcp/udp 40000:60000
  map ng0 192.168.1.0/24 -> 0/32 portmap tcp/udp 40000:60000

network diagram:
  cable modem <-> fxp0 carmen fxp1 192.168.1.1 <-> 192.168.1.2 wagner

I can login from wagner into a machine at work ... the packets go
from wagner to carmen fxp1 to ng0 out fxp0 to the machine at work.  Running tcpdump -i ng0 -n on carmen shows the packets have been nat'd.  Upgraded the machine to FreeBSD 5.4-RC2 and the nat'ng no longer happens.  The tcpdump shows the packets going out ng0 with
the private IP address of 192.168.1.2.  Move /boot/kernel.old to
/boot/kernel, rebooted, and things worked again.
>How-To-Repeat:
Setup the above configuration. 
>Fix:
      
>Release-Note:
>Audit-Trail:
>Unformatted: