I overlooked sending this question to this list earlier because the
first notification I saw of the fragment caching problem with
ip-filter was sent to port-i386.  I know the problem has been fixed in
1.5 and later but I'm running 1.4.1 and would prefer not to upgrade.
Alas the latest ip-filter release does not properly install (due to a
problem patching /usr/src/sys/arch/i386/i386/conf.c).  I cannot tell
how to "manually apply" the patch, as the installation notes
recommend.  The other recommendation in the notificaiton of a month
ago was to use adb, gdb or other to modify some kernel variables, an
action I have not discovered a clear guide to performing -- also would
this then be necessary after every reboot?  I'd appreciate any
guidance or pointers anyone on this list can offer for patching or
upgrading ip-filter on 1.4.1, or for working around the fragment
caching bug.

Regards, 
James Wetterau