List,
I am running 3.8 GENERIC on i386 and can't figure out why pf isn't
logging the packets I've told it to, here is a snippet from /etc/
pf.conf...
ext_if="tun0"
int_if="rl0"
lan_net = "192.168.1.0/24"
rfc1918 = "{ 127.0.0.0/8, 172.16.0.0/12, 192.168.0.0/16, 10.0.0.0/8 }"
set block-policy return
set loginterface $ext_if
set skip on lo0
scrub all
scrub on $ext_if all
scrub on $int_if all no-df
nat on $ext_if from $int_if:network to any -> $ext_if
block in log (all) on $ext_if all
.......
the file /var/log/pflog does exist and it seems some packets have
been logged, but only from a couple of days ago. there have been no
packets logged since then however running pfctl -s info shows that
packets are in fact being dropped.
I realise this is a vague email but any pointers would be greatly
appreciated...
poncenby