diff --git a/src/etc/rc.conf b/src/etc/rc.conf
index 975d6f8b..61ff1966 100644
--- a/src/etc/rc.conf
+++ b/src/etc/rc.conf
@@ -1,6 +1,6 @@
 #!/bin/sh -
 #
-#	$OpenBSD: rc.conf,v 1.132 2009/03/16 23:18:45 jacekm Exp $
+#	$OpenBSD: rc.conf,v 1.133 2009/05/31 19:16:16 henning Exp $
 
 # set these to "NO" to turn them off.  otherwise, they're used as flags
 ripd_flags=NO		# for normal use: ""
@@ -69,7 +69,7 @@ rwhod=NO
 nfs_server=NO		# see sysctl.conf for nfs client configuration
 lockd=NO
 amd=NO
-pf=NO			# Packet filter / NAT
+pf=YES			# Packet filter / NAT
 ipsec=NO		# IPsec
 bt=NO			# Bluetooth
 portmap=NO		# Note: inetd(8) rpc services need portmap too