kern/74778: ipsec passthrough / nat-t crash freebsd firewall

mike mike at nux.co.uk
Mon Dec 6 08:50:21 PST 2004


>Number:         74778
>Category:       kern
>Synopsis:       ipsec passthrough / nat-t crash freebsd firewall
>Confidential:   no
>Severity:       serious
>Priority:       medium
>Responsible:    freebsd-bugs
>State:          open
>Quarter:        
>Keywords:       
>Date-Required:
>Class:          sw-bug
>Submitter-Id:   current-users
>Arrival-Date:   Mon Dec 06 16:50:18 GMT 2004
>Closed-Date:
>Last-Modified:
>Originator:     mike
>Release:        5.3
>Organization:
na
>Environment:
FreeBSD thxgate2.thx.office 5.3-RELEASE FreeBSD 5.3-RELEASE #0: Fri Nov  5 04:19:18 UTC 2004     root at harlow.cse.buffalo.edu:/usr/obj/usr/src/sys/GENERIC  i386 
>Description:
Machine used as natted firewall running pf with multiple vlans
one vlan has 2 client machines running sonicwall to connect to a vpn server, one client can connect and establish a vpn as soon as the second client connects to the remote vpn server the freebsd firewall freezes with no messages or log info.
>How-To-Repeat:
Connect two or more sonicwall clients to a vpn server through a freebsd box running pf and natting the connection. 
>Fix:
Only allow one client to run sonicwall at the same time.
>Release-Note:
>Audit-Trail:
>Unformatted:


More information about the freebsd-bugs mailing list