On 2007/02/14 11:47, Tim Kuhlman wrote: > So what is happening? It seems to me that either pf is broken or his linux > kernel is broken and pf is catching it. Any ideas as to which is the cause?
Ruleset more likely. If you post it, people can make suggestions. Might be useful to capture a SYN with tcpdump and post any state entries relating to it, too (the relevant parts of pfctl -ss -v).
