https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=291763

--- Comment #4 from [email protected] ---
Not sure what to say other than it (reverting that commit) seems to work:

## BEFORE

# /.zfs/snapshot/2026-01-15-16:41:56/sbin/pfctl -s info | head -n 12
Status: Enabled for 28 days 21:05:29          Debug: Urgent

Interface Stats for cable             IPv4             IPv6
  Bytes In                               0                0
  Bytes Out                              0                0
  Packets In
    Passed                       908277654              115
    Blocked                         413880                0
  Packets Out
    Passed                               0                0
    Blocked                      392875690                0


## AFTER

# pfctl -s info | head -n 12
Status: Enabled for 28 days 21:05:31          Debug: Urgent

Interface Stats for cable             IPv4             IPv6
  Bytes In                               0                0
  Bytes Out                              0                0
  Packets In
    Passed                       908277678                0
    Blocked                         413880                0
  Packets Out
    Passed                       392875724                0
    Blocked                            115                0


And those are the correct numbers; if I put in a rule to block outgoing to port
12345, and then try to use it, I see the blocked count go up:


# nc www.freebsd.org 12345
# pfctl -s info | head -n 12
Status: Enabled for 28 days 21:05:34          Debug: Urgent

Interface Stats for cable             IPv4             IPv6
  Bytes In                               0                0
  Bytes Out                              0                0
  Packets In
    Passed                       908277708                0
    Blocked                         413880                0
  Packets Out
    Passed                       392875766                0
    Blocked                            116                0

# freebsd-version
15.0-RELEASE-p1

-- 
You are receiving this mail because:
You are the assignee for the bug.

Reply via email to