"pass in" blocks traffic

[Lloyd Parkes]

I've been spending some time trying to work out why I can't ping on my 
firewall. I guessed that something was very wrong when "ping 127.0.0.1" 
didn't work.

I finally convinced ipmon to tell me
	22/11/2004 18:15:28.569062 lo0 @0:12 b 127.0.0.1 -> 127.0.0.1 PR icmp 
len 20 84 icmp echoreply/0 K-S IN

"ipfstat -in" tells me
        @12 pass in quick proto icmp from any to any keep state
wtf. How can "pass in" block packets?
I'm running
        ipf: IP Filter: v4.1.3 (396)
        Kernel: IP Filter: v4.1.3
        Running: yes
        Log Flags: 0x20000000 = block
        Default: pass all, Logging: available
        Active list: 0
        Feature mask: 0x10a
on NetBSD 2.0 RC4.
Lloyd