ipfw seems to have developed a bug lately on 5-CURRENT; # ipfw add 2042 allow tcp from 0.0.0.0/0 to me 42 02042 allow tcp from me to me dst-port 42 It used to work that 0.0.0.0/0 was "any" instead of "me". Last I checked the notation is also widely used in networking gear for default route which is a "catch any" definition. Pete