I am apparently not getting pf at a very simple level.  Here's my rule:

match proto tcp from any to any port 80 label "web"

Here's the output of pfctl -sr -v after visiting a few websites:

match proto tcp from any to any port = www label "web"
  [ Evaluations: 1398      Packets: 0         Bytes: 0           States: 0     ]
  [ Inserted: uid 0 pid 931 State Creations: 0     ]

I would expect that rule to match the packets to port 80 and make the
counters go up, but they stay stuck at 0.  Why is that?

Reply via email to