Hi, I have a couple of patches to let PF handle fragmented IPv6 packets. They've been uploaded to phabricator: https://reviews.freebsd.org/D1764 https://reviews.freebsd.org/D1765 https://reviews.freebsd.org/D1766 https://reviews.freebsd.org/D1767 Two of my systems are currently running them, seemingly without problems. Regards, Kristof