On 2015-03-28, Geoff Steckel <g...@oat.com> wrote: > Is there a rule which will guarantee that a packet will be logged > no matter what happens to it later in pf processing?
"match log(matches)" might be useful here. > The IPv6 packets cross routing domains to get to/from gif0. This may possibly be involved in the problem. I've had a similar setup in the past which worked, but I used route-to/reply-to rather than routing domains.
