With Gentoo-Sources kernel and iptables performing Destination NAT to an internal PPTP server a kernel panic on the firewall is experienced when a Windows 2000 client closes the PPTP connection to the server. Reproducible: Always Steps to Reproduce: 1. Setup Gentoo-Sources kernel on multi-headed box. 2. Use Win2k "Routing and Remote Access" to set up PPTP service on the inside - this may be reproducable with other PPTP servers e.g. Cisco, poptop etc... 3. Use Win2k (possibly other clients cause problem as well) client to connect using the default VPN connection details. 4. On disconnecting the Win2k client the Gentoo box will experience a kernel panic and will need a hard reboot to recover. Actual Results: Kernel Panic Expected Results: Connection should have closed normally. gate root # emerge info Portage 2.0.47-r10 (default-x86-1.4, gcc-3.2.2, glibc-2.3.1-r4) ================================================================= System uname: 2.4.20-gentoo-r2 i686 Intel(R) Pentium(R) III CPU - S 1266MHz GENTOO_MIRRORS="http://gentoo.oregonstate.edu/ http://distro.ibiblio.org/pub/Linux/distributions/gentoo" CONFIG_PROTECT="/etc /var/qmail/control /usr/share/config /usr/kde/2/share/confi g /usr/kde/3/share/config /usr/X11R6/lib/X11/xkb" CONFIG_PROTECT_MASK="/etc/gconf /etc/env.d" PORTDIR="/usr/portage" DISTDIR="/usr/portage/distfiles" PKGDIR="/usr/portage/packages" PORTAGE_TMPDIR="/var/tmp" PORTDIR_OVERLAY="" USE="x86 oss 3dnow apm arts avi crypt cups encode gif gpm imlib kde libg++ mikmod mmx motif mpeg ncurses nls oggvorbis pdflib quicktime sdl spell svga truetype xml2 xmms xv gdbm berkdb slang readline tcpd pam libwww python opengl gd jpeg mysql perl png ssl zlib -X -gtk -gnome -alsa -java -qt" COMPILER="gcc3" CHOST="i686-pc-linux-gnu" CFLAGS="-march=pentium3 -O3 -pipe -fomit-frame-pointer" CXXFLAGS="-O2 -mcpu=i686 -pipe" ACCEPT_KEYWORDS="x86" MAKEOPTS="-j2" AUTOCLEAN="yes" SYNC="rsync://rsync.gentoo.org/gentoo-portage" FEATURES="sandbox ccache"
this seems to be fixed in gentoo-sources-2.4.20-r5. please reopen if you find otherwise. Thanks, Jay
