>> in line 2061 of ip_fw2.c in the crhold()
>> the argument should be pcb->inp_cred, not inp->cred
>>
>> 2059 if (pcb != NULL) {
>> 2060 *uc = crhold(inp->inp_cred); <--s/inp/pcb/
>> 2061 *ugid_lookupp = 1;
>> 2062 }
>
> Confirmed, this fixes the problem. Filtering by gid works and no
> panics. Thanks a lot!
also confirmed. <whew!>
randy