>Number:         11670
>Category:       kern
>Synopsis:       ipf eventually blocks all traffic (thus ignoring any rules set)
>Confidential:   no
>Severity:       critical
>Priority:       high
>Responsible:    kern-bug-people
>State:          open
>Class:          sw-bug
>Submitter-Id:   net
>Arrival-Date:   Sat Dec 09 04:27:00 PST 2000
>Closed-Date:
>Last-Modified:
>Originator:     Stephen Welker
>Release:        1.4.3
>Organization:
Nemostar Pty Ltd
>Environment:
NetBSD hermes 1.4.3 NetBSD 1.4.3 (GENERIC) #60: Wed Nov  1 01:35:30 MET 2000     he@vever.runit.no:/usr/src/sys/arch/i386/compile/GENERIC i386
>Description:
With ipf enabled (sysctl -w net.inet.ip.forwarding=1), after say a few hours of solid traffic (at modem speed) all traffic is blocked.
>How-To-Repeat:
see below "Fix to the problem if known" for more details.
>Fix:
"ipf -D" followed by "ipf -E -Fa -f /etc/ipf.conf" will fix the problem a few times. Finally only a "ipf -D" will allow any traffic at all. A reboot is then necessary to achieve the use of any filter rules.
>Release-Note:
>Audit-Trail:
>Unformatted: