Hello, Michael. You wrote 29 августа 2012 г., 19:01:50: >> ip from any to any in recv vr0 MS> "any" here is also not appropriate... Additional checks (for correct addresses, etc) are performed at rules 11xxx :) -- // Black Lion AKA Lev Serebryakov <lev at FreeBSD.org>