>Number:         9174
>Category:       kern
>Synopsis:       ipnat -f filename without ipf -E crashes system
>Confidential:   no
>Severity:       non-critical
>Priority:       low
>Responsible:    kern-bug-people (Kernel Bug People)
>State:          open
>Class:          sw-bug
>Submitter-Id:   net
>Arrival-Date:   Tue Jan 11 21:18:00 2000
>Last-Modified:
>Originator:     Curt Sampson
>Organization:
Curt Sampson  <cjs@cynic.net>   917 532 4208   De gustibus, aut bene aut nihil.
The most widely ported operating system in the world: http://www.netbsd.org
>Release:        2000-01-10
>Environment:
	
NetBSD bucolic.union.cynic.net 1.4P NetBSD 1.4P (BUCOLIC) #5: Tue Jan 11 18:32:52 EST 2000     cjs@bucolic.union.cynic.net:/u/co/current/src/sys/arch/i386/compile/BUCOLIC i386


>Description:
    If you run ipnat -f filename and filename has rules in it (i.e., not
    empty or just comments), the system will page fault in the kernel and
    end up at the debugger or reboot.
>How-To-Repeat:
    Boot a system without running ipf. Add the following to /etc/ipnat.conf:
	map we2 192.168.88.0/24 -> 0/32
    and then run
	ipf -f /etc/ipnat.conf
>Fix:
>Audit-Trail:
>Unformatted: