Apply by doing:
        cd /usr/src
        patch -p0 < 028_bridge.patch

And then rebuild your kernel.

Index: sys/net/if_bridge.c
===================================================================
RCS file: /cvs/src/sys/net/if_bridge.c,v
retrieving revision 1.124.2.1
retrieving revision 1.124.2.2
diff -u -p -r1.124.2.1 -r1.124.2.2
--- sys/net/if_bridge.c	14 Mar 2004 00:13:42 -0000	1.124.2.1
+++ sys/net/if_bridge.c	25 Aug 2004 21:45:52 -0000	1.124.2.2
@@ -2222,9 +2222,9 @@ bridge_ipsec(int dir, int af, int hlen, 
 			splx(s);
 			return (1);
 		} else {
+			splx(s);
  skiplookup:
 			/* XXX do an input policy lookup */
-			splx(s);
 			return (0);
 		}
 	} else { /* Outgoing from the bridge. */