On Mon, Apr 06, 2009 at 04:31:42PM +0100, Sevan / Venture37 wrote: > try adding: > pass in on $ext_if inet proto ipv6 > to your pf.conf This has nothing to do with "in" direction. Packets coming "in" are passed fine and they do create a proper state. The problem is that packets that are coming "out" when there is no state don't create don't create approporiate state, and are not visible on pflog0 even though all my block rules are logged.
This problem is confirmed by Apr 6 01:21:39 D2710 /bsd: pf: stack key attach failed on all: 41 out wire: 209.51.181.2 12.158.188.186 stack: 209.51.181.2 12.158.188.186 1:0
