misc/132176: pf stalls connection when using route-to

[Denis]

>Number:         132176
>Category:       misc
>Synopsis:       pf stalls connection when using route-to
>Confidential:   no
>Severity:       serious
>Priority:       medium
>Responsible:    freebsd-bugs
>State:          open
>Quarter:        
>Keywords:       
>Date-Required:
>Class:          sw-bug
>Submitter-Id:   current-users
>Arrival-Date:   Fri Feb 27 18:20:01 UTC 2009
>Closed-Date:
>Last-Modified:
>Originator:     Denis
>Release:        7.1
>Organization:
NGC
>Environment:
FreeBSD host.domain.com 7.1-RELEASE-p3 FreeBSD 7.1-RELEASE-p3 #0: Tue Feb 24 09:48:43 CET 2009     root at hostname.domain.com:/usr/obj/usr/src/sys/dell  amd64

>Description:
On 6.3 i used such pf config:
------
if_bce0="bce0"
if_bce0_gw="172.20.51.1"
if_bce1="bce1"

scrub in all

pass out on $if_bce1 route-to ($if_bce0 $if_bce0_gw) from $if_bce0 to any
-------
It is used to such situation:
I have 2 interfaces. default route on bce1
such pf rule makes perly to packets coming from bce0 go out through if_bce0_gw ignoring default gw.

On 7.1 config changed to this one:
---------
pass out on $if_bce1 route-to ($if_bce0 $if_bce0_gw) from $if_bce0 to any no state flags any
---------

On 7.1-p2 it works fine. On 7.1-p3 i can upload via scp to server, but download stalls.
>How-To-Repeat:
install 7.1-p3 on host with 2 network interfaces and apply listed pf config.
then try scp any file from this host.
for example:
server - is host with 7.1-p3
client - any box
run from client:
scp user at server:~/anyfile .

>Fix:


>Release-Note:
>Audit-Trail:
>Unformatted: