(the message I sent you was offlist, it's usual to reply to offlist email privately)
On 2007/01/12 18:30, [EMAIL PROTECTED] wrote: > With a ssh session I get all the packets going to ExtInAck If I place your exact ruleset in pf.conf, adjust for my sk(4) rather than your xl(4), reload PF and connect by ssh from another machine, I get this: queue root_sk0 [ pkts: 0 bytes: 0 queue default-Ext-In [ pkts: 1 bytes: 60 queue sshExtInObsd [ pkts: 0 bytes: 0 queue sshinteractext [ pkts: 35 bytes: 4162 queue sshbulkext [ pkts: 9 bytes: 2759 queue httpExtInObsd [ pkts: 0 bytes: 0 queue ExtInAck [ pkts: 0 bytes: 0 so there's no general problem with these rules...