On Fri, 28 Aug 2020 22:33:30 +0200, Claudio Jeker <[email protected]> wrote:
> Have a look at the pf(4) stats. especially check if the congestion > counter increases when you see the error. If pf(4) detects a network > congestion then ruleset evaluation is skipped and only state matching > happens. In that case you can get EACCESS for connections that would > normally be allowed by pf(4). Thanks, I'll take a look at `systat pf` if it happens again. Daniel
