Unable to upload to S3 when pf is activated

[murdoch.john at moumantai.de]

Hi there,

this might sound as a strange question, but when I activate the PF
firewall using a minimal rule set (see below), uploading files to
AWS S3 becomes impossible.

The boto library throws a ‘broken pipe’ exception. But if I deactivate
the firewall, everything works fine.

> uname -a
FreeBSD ip-10-193-173-48 10.2-RELEASE-p7 FreeBSD 10.2-RELEASE-p7

> cat /etc/pf.conf
scrub all
block return-icmp log (all) all
pass log (all) all modulate state

> aws —version
aws-cli/1.9.12 Python/2.7.10 FreeBSD/10.2-RELEASE-p7 botocore/1.3.12

There are no ‘block’ entries when watching pflog0.
https://gist.github.com/JoergFiedler/b284af0be47983ac867b

I am lost. Anyone any ideas.

Thanks a lot.
John