smallies tcp window scaling support in the state engine (RFC 1323) "raptor" syncookie fix: send an RST if an invalid packet matches the state during handshake. makes the ACK+10000 cookie scheme used by some raptor firewalls work with pf full CIDR support: pass in from 10/8 to any now correctly expands to pass in inet from 10.0.0.0/8 to any