Add flags to rc.d/ipfilter. Use it from rc.conf like ipfilter=YES ipfilter_flags="-T fr_statemax=18963,fr_statesize=27091"Ok: Christos Zoulas <christos@netbsd.org>