I have a patch to switch the ipfilter code from using the deprecated timeout(9) API to using callout(9) instead. Is anyone able to test this? http://www.FreeBSD.org/~jhb/patches/ipfilter_callout.patch -- John Baldwin