>> The solution is to not use tftp across a firewall. > >As I'm running ipf on every server, to protect sensitive ports from >traffic from untrusted nets, this is not an option. Create a trusted net or don't use tftp.