kern/143973: ipfw forward option causes kernel reboot

[rick norman]

>Number:         143973
>Category:       kern
>Synopsis:       ipfw forward option causes kernel reboot
>Confidential:   no
>Severity:       critical
>Priority:       high
>Responsible:    freebsd-bugs
>State:          open
>Quarter:        
>Keywords:       
>Date-Required:
>Class:          sw-bug
>Submitter-Id:   current-users
>Arrival-Date:   Mon Feb 15 22:30:01 UTC 2010
>Closed-Date:
>Last-Modified:
>Originator:     rick norman
>Release:        8.0 release
>Organization:
>Environment:
FreeBSD 8.0-RELEASE #0 Mon Jan 11 2010
>Description:
establishing tcp stream causes system to reboot when ipfw fwd rule is used to select the output interface.
>How-To-Repeat:
configure two nodes on one lan as follows :

node01
ifconfig em1 alias 10.77.1.2/24
ifconfig em1 alias 10.77.2.2/24

ipfw add 101 fwd 10.77.1.1 ip from 10.77.1.2 to any out
ipfw add 102 fwd 10.77.2.1 ip from 10.77.2.2 to any out

node02
ifconfig em1 alias 10.77.1.1/24
ifconfig em1 alias 10.77.2.1/24

In one window on node01 run "nc -l 8889 > /dev/null".  In a second window on node01 run "yes | nc -s 10.77.1.2 10.77.2.2 8889".  The system freezes then reboots.  Remember to enable IPFIRWALL_FORWARD in the kernel.
>Fix:


>Release-Note:
>Audit-Trail:
>Unformatted: