diff --git a/sys/netinet/ip_input.c b/sys/netinet/ip_input.c
index 683a767341ac..b3d3c4ac369e 100644
--- a/sys/netinet/ip_input.c
+++ b/sys/netinet/ip_input.c
@@ -1649,6 +1649,10 @@ ip_forward(m, srcrt)
 		type = ICMP_SOURCEQUENCH;
 		code = 0;
 		break;
+
+	case EACCES:			/* ipfw denied packet */
+		m_freem(mcopy);
+		return;
 	}
 	icmp_error(mcopy, type, code, dest, destifp);
 }