It very dimly rings a bell. I think I saw a problem where ipfilter did range checks on sequence numbers, but this depended on seeing window scaling options. So I would use ipfstat -inh6 (and -onh6) and find the blocked packets, and add log statements, and also dump your state entries. It wouldn't surprise me if there's a bug.
Attachment:
pgp1I64dHMG6C.pgp
Description: PGP signature