Subject: Re: Problems with ipnat on NetBSD 2.0.2
To: Chris Ross <cross+ipfilter@distal.com>
From: Darren Reed <darrenr@reed.wattle.id.au>
List: tech-net
Date: 07/21/2005 07:00:58 
The below patch addresses your problem.

Darren

Index: ip_nat.c
===================================================================
RCS file: /devel/CVS/IP-Filter/ip_nat.c,v
retrieving revision 2.195.2.14
diff -c -r2.195.2.14 ip_nat.c
*** ip_nat.c	29 Jun 2004 14:22:01 -0000	2.195.2.14
--- ip_nat.c	20 Jul 2005 06:07:13 -0000
***************
*** 3498,3504 ****
  	nat_t *nat;
  	int rval;
  
! 	if (nat_stats.ns_rules == 0 || fr_nat_lock != 0)
  		return 0;
  
  	fr = fin->fin_fr;
--- 3498,3504 ----
  	nat_t *nat;
  	int rval;
  
! 	if (nat_stats.ns_rules == 0 || fr_nat_lock != 0 || fin->fin_v != 4)
  		return 0;
  
  	fr = fin->fin_fr;
***************
*** 3776,3782 ****
  	u_32_t iph;
  	int rval;
  
! 	if (nat_stats.ns_rules == 0 || fr_nat_lock != 0)
  		return 0;
  
  	tcp = NULL;
--- 3776,3782 ----
  	u_32_t iph;
  	int rval;
  
! 	if (nat_stats.ns_rules == 0 || fr_nat_lock != 0 || fin->fin_v != 4)
  		return 0;
  
  	tcp = NULL;