kern/79895: 5.4-RC2 breaks ipfilter NAT when using netgraph
John Wehle
john at feith.com
Thu Apr 14 00:20:23 PDT 2005
>Number: 79895
>Category: kern
>Synopsis: 5.4-RC2 breaks ipfilter NAT when using netgraph
>Confidential: no
>Severity: serious
>Priority: medium
>Responsible: freebsd-bugs
>State: open
>Quarter:
>Keywords:
>Date-Required:
>Class: sw-bug
>Submitter-Id: current-users
>Arrival-Date: Thu Apr 14 07:20:22 GMT 2005
>Closed-Date:
>Last-Modified:
>Originator: John Wehle
>Release: 5.4-RC2
>Organization:
Personal
>Environment:
FreeBSD carmen.FEITH.COM 5.4-RC2 FreeBSD 5.4-RC2 #0: Thu Apr 14 00:43:38 EDT 2005 root at wagner.FEITH.COM:/usr/obj/usr/src/sys/CARMEN i386
>Description:
Using mpd on FreeBSD 5.3 to VPN into work
ipnat.rules containing:
map fxp0 192.168.1.0/24 -> 0/32 portmap tcp/udp 40000:60000
map ng0 192.168.1.0/24 -> 0/32 portmap tcp/udp 40000:60000
network diagram:
cable modem <-> fxp0 carmen fxp1 192.168.1.1 <-> 192.168.1.2 wagner
I can login from wagner into a machine at work ... the packets go
from wagner to carmen fxp1 to ng0 out fxp0 to the machine at work. Running tcpdump -i ng0 -n on carmen shows the packets have been nat'd. Upgraded the machine to FreeBSD 5.4-RC2 and the nat'ng no longer happens. The tcpdump shows the packets going out ng0 with
the private IP address of 192.168.1.2. Move /boot/kernel.old to
/boot/kernel, rebooted, and things worked again.
>How-To-Repeat:
Setup the above configuration.
>Fix:
>Release-Note:
>Audit-Trail:
>Unformatted:
More information about the freebsd-bugs
mailing list