Subject: Re: kern/29529: ipfilter fastrouted packets corrupted
To: None <kern-bug-people@netbsd.org, gnats-admin@netbsd.org,>
From: Arto Selonen <arto@selonen.org>
List: netbsd-bugs
Date: 02/26/2005 09:27:02
The following reply was made to PR kern/29529; it has been noted by GNATS.
From: Arto Selonen <arto@selonen.org>
To: gnats-bugs@netbsd.org
Cc: kern-bug-people@netbsd.org, gnats-admin@netbsd.org,
netbsd-bugs@netbsd.org
Subject: Re: kern/29529: ipfilter fastrouted packets corrupted
Date: Sat, 26 Feb 2005 11:26:51 +0200 (EET)
Hi!
On Fri, 25 Feb 2005 arto@selonen.org wrote:
>> Number: 29529
>> Category: kern
>> Synopsis: ipfilter fastrouted packets corrupted
> However, there is another problem that could be related to this PR:
> FTP connections from IANA-side to Internet cause a panic on another
> NetBSD-current box acting as a gateway/firewall between Internet and
> the above mentioned public network. An expanded network setup:
>
> internet <--> ipf-413-NBSD-C <--> pub-net <--> ipf-416-NBSD-C <--> iana
>
> So, ipf-413 box panics on some FTP traffic that is related
> to an FTP connection made from iana through ipf-416 and ipf-413
> boxes to some FTP server in Internet. So far, we have not been able
> to reproduce the panic reliably, so exact details are not known.
> If somebody thinks those panics warrant a PR of their own, please let
It seems to be a separate issue about active FTP support with NAT.
See kern/29531.
Artsi
--
#######======------ http://www.selonen.org/arto/ --------========########
Everstinkuja 5 B 35 Don't mind doing it.
FIN-02600 Espoo arto@selonen.org Don't mind not doing it.
Finland tel +358 50 560 4826 Don't know anything about it.