On Mon, Apr 11, 2011 at 08:45:44AM +0300, Zeus V Panchenko wrote: > what i am missing, please? why traffic outgoing to LAN is missed on pflog0? It seems you want log(all), but are only using log, see pf.conf(5): log Only the packet that establishes the state is logged log (all) Used to force logging of all packets for a connection. Daniel