Hi, You (Jon Simola) wrote: > If that's a bridge config, synproxy will not work. It's not possible > to tell from the documentation you provided. No, it is the pf box is acting as gateway. But the reply packet from webserver is dropped at the dmz interface. If I allow this reply explicitly, synproxy works. Obviously I have a problem with state table entries. bye, Andy