$OpenBSD: patch-src_client_side_c,v 1.11 2007/02/01 07:46:24 todd Exp $
--- src/client_side.c.orig	Tue Jan 23 20:38:16 2007
+++ src/client_side.c	Wed Jan 24 02:11:55 2007
@@ -4443,7 +4443,7 @@ clientNatLookup(ConnStateData * conn)
     static int pffd = -1;
     static time_t last_reported = 0;
     if (pffd < 0) {
-	pffd = open("/dev/pf", O_RDWR);
+	pffd = open("/dev/pf", O_RDONLY);
 	if (pffd >= 0)
 	    commSetCloseOnExec(pffd);
     }
