OpenBSD 4.9: pf changes logging subsystem rewritten match log(matches) allows rule traces pflog(4) now includes the original addresses and ports for NAT