Subject: Re: kern/29529: ipfilter fastrouted packets corrupted
To: None <kern-bug-people@netbsd.org, gnats-admin@netbsd.org,>
From: Arto Selonen <arto@selonen.org>
List: netbsd-bugs
Date: 02/26/2005 09:27:02
The following reply was made to PR kern/29529; it has been noted by GNATS.

From: Arto Selonen <arto@selonen.org>
To: gnats-bugs@netbsd.org
Cc: kern-bug-people@netbsd.org, gnats-admin@netbsd.org,
	netbsd-bugs@netbsd.org
Subject: Re: kern/29529: ipfilter fastrouted packets corrupted
Date: Sat, 26 Feb 2005 11:26:51 +0200 (EET)

 Hi!
 
 On Fri, 25 Feb 2005 arto@selonen.org wrote:
 
 >> Number:         29529
 >> Category:       kern
 >> Synopsis:       ipfilter fastrouted packets corrupted
 
 > However, there is another problem that could be related to this PR:
 > FTP connections from IANA-side to Internet cause a panic on another
 > NetBSD-current box acting as a gateway/firewall between Internet and
 > the above mentioned public network. An expanded network setup:
 >
 > internet <--> ipf-413-NBSD-C <--> pub-net <--> ipf-416-NBSD-C <--> iana
 >
 > So, ipf-413 box panics on some FTP traffic that is related
 > to an FTP connection made from iana through ipf-416 and ipf-413
 > boxes to some FTP server in Internet. So far, we have not been able
 > to reproduce the panic reliably, so exact details are not known.
 
 > If somebody thinks those panics warrant a PR of their own, please let
 
 It seems to be a separate issue about active FTP support with NAT.
 See kern/29531.
 
 
 Artsi
 -- 
 #######======------  http://www.selonen.org/arto/  --------========########
 Everstinkuja 5 B 35                               Don't mind doing it.
 FIN-02600 Espoo        arto@selonen.org         Don't mind not doing it.
 Finland              tel +358 50 560 4826     Don't know anything about it.