> This is a very bad advise you got. Syncookies should only be used in > exterme situations because the they do lose some of the additional > information that is part of the SYN packet. "syncookies always" is only > there for testing but should not be used in production. >
Thank you Claudio. Message received. "syncookies always" has now been removed from my pf.conf (has not fixed the current problem, but at least you've made me confident I've avoided a potential future problem !).
