$OpenBSD: patch-src_client_side_c,v 1.15 2008/07/16 21:18:28 brad Exp $
--- src/client_side.c.orig	Tue Jun 24 18:54:47 2008
+++ src/client_side.c	Sun Jun 29 03:10:15 2008
@@ -4519,7 +4519,7 @@ clientNatLookup(ConnStateData * conn)
     static int pffd = -1;
     static time_t last_reported = 0;
     if (pffd < 0) {
-	pffd = open("/dev/pf", O_RDWR);
+	pffd = open("/dev/pf", O_RDONLY);
 	if (pffd >= 0)
 	    commSetCloseOnExec(pffd);
     }
