> > > pass out quick on rtk0 proto tcp from rtk0/32 to any port = 22 keep state > > > > Does one need to ipf -y every time the address on rtk0 changes? > > At present, yes.
Hmm, then this wouldn't be ideal for this situation. The DHCP leases is only 280 seconds, and I can't tell when it will change, so ipf -y isn't a solution. Thanks, Amadeus
