To whom it may concern, there is a small typo in defaults.conf. - pflog_logfile="/var/log/pflog" # where pflogd shoule store the logfile + pflog_logfile="/var/log/pflog" # where pflogd should store the logfile Thanks.