>Number:         15685
>Category:       kern
>Synopsis:       panic in ip_natin()
>Confidential:   no
>Severity:       critical
>Priority:       high
>Responsible:    kern-bug-people
>State:          open
>Class:          sw-bug
>Submitter-Id:   net
>Arrival-Date:   Wed Feb 20 13:34:00 PST 2002
>Closed-Date:
>Last-Modified:
>Originator:     Paul Dokas
>Release:        NetBSD 1.5ZA
>Organization:
	University of Minnesota, Department of Computer Science
>Environment:
	
	
System: NetBSD caligula 1.5ZA NetBSD 1.5ZA (CALIGULA) #10: Fri Feb 15 15:11:23 CST 2002 root@caligula:/big/src/sys/arch/i386/compile/CALIGULA i386
Architecture: i386
Machine: i386
>Description:

Here's the DDB output.  Typos are mine;  I copied this from the
screen by hand.

  kernel: page fault trap, code=0
  Stopped at  ip_natin+0x3c4: movw  %ax,  0x2(%edx)

  db> trace
  ip_natin(c5f86820,c6dadce8,c6dadce8,0,c5f86820) at ip_natin+0x3c4
  fr_check(c5f86820,14,c05a5038,0,c6dadda8) at fr_check+0x2de
  gcc2_compiled.(0,c6dadda8,c05a5038,1,c0758445) at gcc2_compiled.+0x72
  pfil_run_hooks(c03ab2c0,c6daddf4,c05a5038) at pfil_run_hooks+0x4c
  ip_input(c0758400,c011a02c,c059e000,0) at ip_input+0x212
  ipintr(c0310010,10,10,c6c10010,c6c18c98) at ipintr+0x6b
  Bad frame pointer: 0xcdade1c

  db> show reg
  ds	0x10
  es	0x10
  fs	0x10
  gs	0x10
  edi	0xc6dadce8 end+0x69f1888
  esi	0xc077bd00 end+0x3bf8a0
  ebp	0xc6dadc9c end+0x69f183c
  ebx	0xc06af000 end+0x2f2ba0
  edx	0
  ecx	0xc5f86820 end+0x5bca3c0
  eax	0x4422
  eip	0xc01e9654 ip_natin+0x3c4
  cs	0x8
  eflags	0x10202
  esp	0xc6dadc54 end+0x69f17f4
  ss	0x10

  x/x c5f86820,0x40
  0xc5f86820:	5dc0045		4000bc77	e0d501f1	8912ef82	1117170a	fff70008	0		0		0		0		0		0
  0xc5f86850:	0		0		0		0		0		0
  0xc5f86868:	0		0		0		0		0		0
  0xc5f86880:	0		0		0		0		0		0
  0xc5f86898:	0		0		0		0		0		0
  0xc5f868b0:	0		0		0		0		0		0
  0xc5f868c8:	0		0		0		0		0		0
  0xc5f868e0:	0		0		0		0		0		0
  0xc5f868f8:	0		0		0		0		0		0
  0xc5f86910:	0		0		0		0

>How-To-Repeat:

  Attempt to build or update the gnome components (oaf, ORBit, gnome-lib,
bonobo, etc, etc) on a netbsd machine that is behind a -current machine
running NAT for it.  In particular, here's my /etc/ipnat.conf file:

  map fxp0 10.23.23.0/24 -> 128.101.X.Y/32 proxy port ftp ftp/tcp
  map fxp0 10.23.23.0/24 -> 128.101.X.Y/32 portmap tcp/udp 10000:60000
  map fxp0 10.23.23.0/24 -> 128.101.X.Y/32

Where 10.23.23.0/24 is my internal network and 128.101.X.Y/32 is my
external IP.

The NATting machine is dying when the machine behind it attempts to
FTP to retrieve one of the packages.  When rebuilding all of the GNOME
components last night, by NATting firewall died 4 times.

>Fix:

  I don't know.
>Release-Note:
>Audit-Trail:
>Unformatted: