Milan Obuch wrote: > > No, there were not much states per problematic IP, maybe just tens of > them for one or couple internal IPs. That's weird. What's the output of 'pfctl -sa' (without the states). Ian -- Ian Freislich