I re-enabled the rfc1323 option again and adapted ipf.rules such that I had:
Code:
pass in quick on xl1 proto tcp from any to any port = 25 flags S/SA keep state
but then packets got blocked by the firewall with the OOW addition (see my original post to see what i mean).