On Wed, May 31, 2000 at 10:19:22PM -0500, Nicholas Binder wrote:
> #0  0xf01342ed in m_copypacket ()
...
> #7  0xf016d28c in ip_natin ()

That's almost certainly kern/7831.

If you built your kernel yourself, check the version of
/usr/src/sys/netinet/ip_proxy.c

You want version 1.18 - which includes the fix to this bug,
which occurs when ipnat's Active Ftp proxy feature receives
host unreachable ICMP messages.

If you did build your own kernel, grab 1.18 of ip_proxy.c
by your favorite method - anoncvs, or cvsweb, drop in, build
a new kernel and you'll be set.

The fix, and further enhancements to ipfilter are already in
NetBSD 1.4.2

If you didn't build your own kernel, send me an email.

-- 
David Maxwell, david@vex.net|david@maxwell.net -->
Any sufficiently advanced Common Sense will seem like magic... 
					      - me