maybe i've missed something. ifconfig rl0 group wan_if
pf.conf: -> altq on wan_if cbq bandwidth 100Mb queue { http ssh } produce an error when loading the ruleset. but every other rules like -> pass in on wan_if proto tcp to port ssh keep state queue ssh will be accepted. isn't that a bit confusing? Karl-Heinz