It seems that, at least with the PF devices built into the kernel that an issue arises during shutdown. As I was rebooting the server, I noticed that the disks were syncing and yet there was a huge amount of traffic on my router to the Internet. Upon inspection, packets were still passing through the kernel and a large download was still going on through a kernel that should have long ago quite passing traffic! In other words, it appears that the NAT function of PF does not shutdown as it should while the the OS is shutting down. Traffic ceases almost immediately with IPFW and IPFILTER. Thanks, Tom Veldhouse
This archive was generated by hypermail 2.4.0 : Wed May 19 2021 - 11:38:12 UTC