On Fri, Dec 16, 2005 at 01:47:59PM -0600, Paul Dokas wrote: > Bingo (I think). I found the following in the firewall's kernel config: > > options HZ=2000 > > I'm going to get than changed and see if the problem goes away.
I just discovered that this seems to be a know problem with setting HZ, if only I had searched earlier ;) Subject: 6-STABLE: HZ>1000, RFC1323 non-compliance, and PF http://marc.theaimsgroup.com/?t=113476573600004&r=1&w=2 Problem Report kern/61404 : RFC1323 timestamps with HZ > 1000 http://www.freebsd.org/cgi/query-pr.cgi?pr=kern/61404 It appears that this is related to the HZ setting on your SSH server (i.e. one of the TCP endpoints) not any HZ setting on the kernel pf runs on itself (so it requires a fix in the generic TCP code, not within pf). Daniel _______________________________________________ freebsd-pf@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-pf To unsubscribe, send any mail to "[EMAIL PROTECTED]"