'keep state' broken after recent ipfilter update?

[Markus W Kilbinger <mk%kilbi.de@localhost>]

Hi!

I've just updated a -current i386 machine acting as a ipf/ipnat router
to actual -current (complete built from scratch) including ipfilters
update

  http://mail-index.netbsd.org/source-changes/2008/05/20/msg006544.html

Now a ipf.conf sequence of

  block in log on ex0 all
  pass out quick on ex0 proto tcp from [local-ip-addr] to any flags S/SA keep 
state

no longer allows outgoing tcp connections (on ex0 from
[local-ip-addr]) which was working before this ipfilter update. Now
incoming tcp packets as a response to the outgoing connection are
blocked by the first rule.

Does anybody else see this? Is this a intended (config) change?

Markus.