On 2007/12/18 11:56, Simon Slaytor wrote: > Apologies if this appears a simple question but I'm a bit baffled. We have a > pair of firewalls, each with two units running as a HA pair via CARP/PFSYNC > etc.
Have you patched for errata 004? ftp://ftp.openbsd.org/pub/OpenBSD/patches/4.2/common/004_pf.patch

