>> in line 2061 of ip_fw2.c in the crhold() >> the argument should be pcb->inp_cred, not inp->cred >> >> 2059 if (pcb != NULL) { >> 2060 *uc = crhold(inp->inp_cred); <--s/inp/pcb/ >> 2061 *ugid_lookupp = 1; >> 2062 } > > Confirmed, this fixes the problem. Filtering by gid works and no > panics. Thanks a lot! also confirmed. <whew!> randy