Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 18 Dec 2025 05:56:11 +0000
From:      bugzilla-noreply@freebsd.org
To:        bugs@FreeBSD.org
Subject:   [Bug 291763] pfctl: loginterface packet counts for pass/block swapped
Message-ID:  <bug-291763-227@https.bugs.freebsd.org/bugzilla/>

index | next in thread | raw e-mail

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=291763

            Bug ID: 291763
           Summary: pfctl: loginterface packet counts for pass/block
                    swapped
           Product: Base System
           Version: 15.0-RELEASE
          Hardware: Any
                OS: Any
            Status: New
          Severity: Affects Only Me
          Priority: ---
         Component: bin
          Assignee: bugs@FreeBSD.org
          Reporter: eborisch+FreeBSD@gmail.com

It appears that the "Packets Out" values printed by pfctl for Passed/Blocked
(present when a 'loginterface' is set in pf.conf) are incorrect.

I'm connecting to bugzilla over said "cable" interface, so I don't believe
the "Passed" count of 0, and I just took way too long trying to figure out
what in the world was generating so much outbound traffic getting blocked
before noticing the "0" passed. (I don't believe 0 "passed" value outbound
is actually the "blocked" count, either -- it may be true in this instance,
but in testing on another 15.0-p1 box, it does not increment even when an 
outbound packet is intentionally blocked on the interface.)

Current output on my 15.0-p1 router:

root@router:~ # pfctl -s info
Status: Enabled for 0 days 03:39:23           Debug: Urgent

Interface Stats for cable             IPv4             IPv6
  Bytes In                               0                0
  Bytes Out                              0                0
  Packets In
    Passed                        14816644                0
    Blocked                           2157                0
  Packets Out
    Passed                               0                0  <--- Likely not
the "blocked" value, either
    Blocked                       10950797                0  <--- Signs point
to this being the "passed" value.

-- 
You are receiving this mail because:
You are the assignee for the bug.

help

Want to link to this message? Use this
URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?bug-291763-227>