Packet Filter (pf)

Debugging pf rulesets FAQ

Q: My traffic from xyz to abc doesn't get through, why?
A: Enable logging on all "block" rules and watch on $tcpdump -vvvnei pflog0 for packets related to this connection attempt. Also keep an eye on $pfctl -si.

Note: I plan to flesh this page as questions pop up on the freebsd-pf@FreeBSD.ORG mailing-list. Please free to do so, as well!