hi! can you somehow add in your diff file this: /etc/protocols carp 112 CARP vrrp # Common Address Redundancy Protocol then will be easy to use the keyword carp instead of vrrp in pf: pass in on $someIF proto carp thanks, -- Dean Benazic www.glasistre.hr