[squid-users] More NAT/TPROXY lookup fails (NetBSD 7.0, IPFilter 5.1)

[Egerváry Gergely]

You saved hours of debugging for me. Thank You!
It works with the patch applied.

-- 
Gergely EGERVARY

> This is a bug in IPFilter 5. We're waiting to hear back from the
> IPFilter maintainer before committing.
>
> Try this patch (and read the PR for more info):
>
> --- sys/external/bsd/ipf/netinet/ip_nat.c       8 Aug 2015 10:09:57
> -0000       1.13.2.1
> +++ sys/external/bsd/ipf/netinet/ip_nat.c       18 Jan 2016 08:34:51 -0000
> @@ -4626,9 +4626,10 @@
>                                          np->nl_flags &= ~IPN_FINDFORWARD;
>                                  }
>                          }
> +/* XXX http://gnats.netbsd.org/50198 */
>
> -                       np->nl_realip = nat->nat_ndstip;
> -                       np->nl_realport = nat->nat_ndport;
> +                       np->nl_realip = nat->nat_odstip;
> +                       np->nl_realport = nat->nat_odport;