svn commit: r264247 - stable/9/sys/netpfil/ipfw

[Devin Teske]

Author: dteske
Date: Tue Apr  8 01:04:23 2014
New Revision: 264247
URL: http://svnweb.freebsd.org/changeset/base/264247

Log:
  MFC a modified version of r258588 (modification suggested by Mikolaj
  Golub; tested stable both original and modified versions) that fixes
  kernel panic when starting/stopping VIMAGE jails.
  
  Discussed with:	rodrigc, Mikolaj Golub

Modified:
  stable/9/sys/netpfil/ipfw/ip_fw_nat.c

Modified: stable/9/sys/netpfil/ipfw/ip_fw_nat.c
==============================================================================
--- stable/9/sys/netpfil/ipfw/ip_fw_nat.c	Tue Apr  8 00:54:11 2014	(r264246)
+++ stable/9/sys/netpfil/ipfw/ip_fw_nat.c	Tue Apr  8 01:04:23 2014	(r264247)
@@ -676,7 +676,7 @@ static moduledata_t ipfw_nat_mod = {
 
 /* Define startup order. */
 #define	IPFW_NAT_SI_SUB_FIREWALL	SI_SUB_PROTO_IFATTACHDOMAIN
-#define	IPFW_NAT_MODEVENT_ORDER		(SI_ORDER_ANY - 255)
+#define	IPFW_NAT_MODEVENT_ORDER		(SI_ORDER_ANY - 128)
 #define	IPFW_NAT_MODULE_ORDER		(IPFW_NAT_MODEVENT_ORDER + 1)
 #define	IPFW_NAT_VNET_ORDER		(IPFW_NAT_MODEVENT_ORDER + 2)