On Thu, Jul 29, 2004 at 01:23:52AM +0200, Jeremie Le Hen wrote: > AFAIK, ipf takes precedence on ipfw for incoming packets on -STABLE, > and this is of course symmetric for outgoing ones. No, outgoing packets are passed through ipf/ipnat before they reach ipfw (at least in STABLE, PR kern/46564). -- Paweł Małachowski