List,

I am running 3.8 GENERIC on i386 and can't figure out why pf isn't logging the packets I've told it to, here is a snippet from /etc/ pf.conf...

ext_if="tun0"
int_if="rl0"

lan_net = "192.168.1.0/24"
rfc1918 = "{ 127.0.0.0/8, 172.16.0.0/12, 192.168.0.0/16, 10.0.0.0/8 }"

set block-policy return
set loginterface $ext_if
set skip on lo0

scrub all
scrub on $ext_if all
scrub on $int_if all no-df

nat on $ext_if from $int_if:network to any -> $ext_if

block in log (all) on $ext_if all
.......

the file /var/log/pflog does exist and it seems some packets have been logged, but only from a couple of days ago. there have been no packets logged since then however running pfctl -s info shows that packets are in fact being dropped.

I realise this is a vague email but any pointers would be greatly appreciated...

poncenby

Reply via email to