On 8/19/2013 5:13 AM, Alexander wrote: > i have 'pass on bridge0 all flags S/SA keep state rule on bridge' That still filters on the bridge interface. Worse, it doesn't allow everything. You need to set skip on bridge0 to completely disable pf on that interface.