[Bug 291763] pfctl: loginterface packet counts for pass/block swapped
Date: Thu, 18 Dec 2025 05:56:11 UTC
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=291763
Bug ID: 291763
Summary: pfctl: loginterface packet counts for pass/block
swapped
Product: Base System
Version: 15.0-RELEASE
Hardware: Any
OS: Any
Status: New
Severity: Affects Only Me
Priority: ---
Component: bin
Assignee: bugs@FreeBSD.org
Reporter: eborisch+FreeBSD@gmail.com
It appears that the "Packets Out" values printed by pfctl for Passed/Blocked
(present when a 'loginterface' is set in pf.conf) are incorrect.
I'm connecting to bugzilla over said "cable" interface, so I don't believe
the "Passed" count of 0, and I just took way too long trying to figure out
what in the world was generating so much outbound traffic getting blocked
before noticing the "0" passed. (I don't believe 0 "passed" value outbound
is actually the "blocked" count, either -- it may be true in this instance,
but in testing on another 15.0-p1 box, it does not increment even when an
outbound packet is intentionally blocked on the interface.)
Current output on my 15.0-p1 router:
root@router:~ # pfctl -s info
Status: Enabled for 0 days 03:39:23 Debug: Urgent
Interface Stats for cable IPv4 IPv6
Bytes In 0 0
Bytes Out 0 0
Packets In
Passed 14816644 0
Blocked 2157 0
Packets Out
Passed 0 0 <--- Likely not
the "blocked" value, either
Blocked 10950797 0 <--- Signs point
to this being the "passed" value.
--
You are receiving this mail because:
You are the assignee for the bug.