Wow, You guys "fixed" it
But it does strange stuff for example it fails the last icmp of a ping, but only the last ( ping -c 4 => 25 loss, ping -c 10 => 10 % loss ) Binding the source address fix it ( ping -I do something ) These is new behavior to me, Is there some updated guideline to stick a state to a route so once a state is created in pf it stays in I also notice ftp requires the -s flag now. Very nice ?