Hi Scott,

As per your request I run it with the following result.
##############
$ pfctl -vvsa | grep 316
@316 pass in quick on ng0 inet proto ah from 194.143.xxx.yyy to 87.97.aaa.bbb keep state label "IPSEC: OfficeDMZ - inbound ah proto"

##############
…BUT ... probably it is not the same  rule #316 anymore. (It seem to me changes time to time, maybe when  I reboot.)

Meanwhile I solved it, so that I created an
" UDP  *  68  *  67  *" rule on my OPT1 (ath0) interface.

I don't know what security hole creates it, if any?
I don't know that after applying your new filter.inc yesterday night, why worked without this rule?
Is ARP filtering is on when interface is bridged?
This static arp enabling is on the dhcp server tab originally, but since now it is bridged, that's no more available.
(Of course it is enabled on LAN as well)

Install 1.0beta1. We are not looking into old errors that might already be solved. If the problem persists with 1.0beta1 report back.

Ufff,thanks :).
Big relief here.

@TheRAt:

@sullrich:

Run from a shell:

update_file.sh /etc/cron && shutdown -r now

Should be

update_file.sh /etc/crontab && shutdown -r now

Yes, my apologies.

#1 -  No.  Use reservations for this range and make the range broader.
#2 - Services -> DHCP Relay
#2 - Not going to work, you cannot split up ranges, you need to add reservations for the items that you wish to not be handed out

check presence of "dhcpd" by running "top" at diagnostics>command

ok thanks!

@skimtat:

Anyway to do it.  I noticed it is not listed in the currect dynamic DNS providers.

Sure, hack up a patch and submit  :o