>Number:         25817
>Category:       kern
>Synopsis:       ipnat rsh proxy causes system lockup
>Confidential:   no
>Severity:       critical
>Priority:       high
>Responsible:    kern-bug-people
>State:          open
>Class:          sw-bug
>Submitter-Id:   net
>Arrival-Date:   Fri Jun 04 13:09:00 UTC 2004
>Closed-Date:
>Last-Modified:
>Originator:     Michael Santos
>Release:        NetBSD 2.0F
>Organization:
	
>Environment:
	
	
System: NetBSD ack 2.0F NetBSD 2.0F (ack) #35: Tue Jun 1 08:26:12 EDT 2004 root@ack:/home/build/src/sys/arch/i386/compile/obj/ack i386
Architecture: i386
Machine: i386
>Description:
Using the ipnat rsh proxy causes the system to lock up.

# cat /etc/ipnat.conf
map wm0 0.0.0.0/0 -> 0.0.0.0/0 proxy port ftp ftp/tcp
map wm0 0.0.0.0/0 -> 0.0.0.0/0 proxy port kshell rcmd/tcp
map ath0 0.0.0.0/0 -> 0.0.0.0/0 proxy port ftp ftp/tcp
map ath0 0.0.0.0/0 -> 0.0.0.0/0 proxy port kshell rcmd/tcp

>How-To-Repeat:

# export CVS_RSH=/usr/local/bin/krsh
# cvs co -c

>Fix:
Disable the rsh proxy.

>Release-Note:
>Audit-Trail:
>Unformatted: