--- src/sys/net/ipfw/ip_fw2.c	2007/10/29 02:59:03	1.30
+++ src/sys/net/ipfw/ip_fw2.c	2007/10/29 12:23:57	1.31
@@ -839,7 +839,7 @@ realloc_dynamic_table(void)
 		kfree(ipfw_dyn_v, M_IPFW);
 	for (;;) {
 		ipfw_dyn_v = kmalloc(curr_dyn_buckets * sizeof(ipfw_dyn_rule *),
-		       M_IPFW, M_WAITOK | M_ZERO);
+		       M_IPFW, M_INTWAIT | M_NULLOK | M_ZERO);
 		if (ipfw_dyn_v != NULL || curr_dyn_buckets <= 2)
 			break;
 		curr_dyn_buckets /= 2;
@@ -870,7 +870,7 @@ add_dyn_rule(struct ipfw_flow_id *id, u_
 	}
 	i = hash_packet(id);
 
-	r = kmalloc(sizeof *r, M_IPFW, M_WAITOK | M_ZERO);
+	r = kmalloc(sizeof *r, M_IPFW, M_INTWAIT | M_NULLOK | M_ZERO);
 	if (r == NULL) {
 		kprintf ("sorry cannot allocate state\n");
 		return NULL;