> how many entries is there in the state table ?

I'll check this tommorrow, but it's certainly more than 200 (there is
about a thousand of machines behind the firewall)

> See LARGE_NAT in net/ip_nat.h, maybe it's the problem.

There is no NAT running on this machine. I'm concerned about the state
table produced by keep state rules in ipf.conf

-- 
Emmanuel Dreyfus
manu@netbsd.org