All right, I believe I have fixed the problem. ipfilter was making assumptions as to the value of TCPS_CLOSED which no longer hold (it's 0 in FreeBSD but not 0 in DragonFly). This prevented the tcp keep state entry from being properly initialized. -Matt