>Number:         28418
>Category:       kern
>Synopsis:       icmp packets get lost with ipf.
>Confidential:   no
>Severity:       serious
>Priority:       high
>Responsible:    kern-bug-people
>State:          open
>Class:          sw-bug
>Submitter-Id:   net
>Arrival-Date:   Thu Nov 25 06:39:00 +0000 2004
>Originator:     Christos Zoulas
>Release:        NetBSD 2.99.10
>Organization:
	Packet Swallow, LLC.
>Environment:
System: NetBSD beowulf.gw.com 2.99.10 NetBSD 2.99.10 (GW-GENERIC) #78: Thu Nov 4 18:20:48 EST 2004 kim@hrothgar.gw.com:/usr/src/sys/arch/i386/compile/GW-GENERIC i386
Architecture: i386
Machine: i386
>Description:
	ICMP packets get lost although explicitly allowed. Note that
	the packets are not blocked; ipfstat shows that the rule matches.
>How-To-Repeat:
	pass out quick on interface
	pass in quick proto icmp all icmp-type echo
	pass in quick proto icmp all icmp-type timex
	pass in quick proto icmp all icmp-type unreach
	pass in quick proto icmp all icmp-type echorep
	pass in quick proto icmp all icmp-type squench
	pass in quick proto icmp all icmp-type paramprob
	block in log quick all
>Fix:
	Unknown