[root@filter ~]# pfctl -s rules
pass in log on bridge0 all
pass out log on bridge0 all
pass in log on rl0 all
pass out log on rl0 all
pass in log on vr0 all
pass out log on vr0 all
pass in log all
pass out log all
[root@filter ~]# cat /etc/mypf.conf
ext_if = "vr0"
external_addr = "1.2.3.4"
int_if = "rl0"
internal_net = "192.168.199.0/24"
proxy_server = "192.168.199.75"
bridge_if = "bridge0"
#rdr inet proto tcp from any to any port 80 -> 127.0.0.1 port 8080
#pass in log on $int_if inet proto tcp from any to 127.0.0.1 port 3128 keep state
#pass in log on $bridge_if inet proto tcp from any to $internal_net port 3128 keep state
#pass out log on $ext_if inet proto tcp from any to any port www keep state
pass in log on $bridge_if
pass out log on bridge0
pass in log on $int_if
pass out log on $int_if
pass in log on $ext_if
pass out log on $ext_if
pass in log all
pass out log all
[root@filter ~]# tcpdump -e -i pflog0 | grep -v ssh | grep -v ICMP | grep -v netbios
tcpdump: WARNING: pflog0: no IPv4 address assigned
tcpdump: verbose output suppressed, use -v or -vv for full protocol decode
listening on pflog0, link-type PFLOG (OpenBSD pflog file), capture size 96 bytes
23:01:12.905407 rule 7/0(match): pass out on bridge0: 192.168.199.75.60296 > ns1.ewol.com.domain: 2900+[|domain]
23:01:12.906654 rule 6/0(match): pass in on bridge0: ns1.ewol.com.domain > 192.168.199.75.60296: 2900 NXDomain[|domain]
23:01:12.906955 rule 7/0(match): pass out on bridge0: 192.168.199.75.57400 > ns1.ewol.com.domain: 2901+[|domain]
23:01:12.908075 rule 6/0(match): pass in on bridge0: ns1.ewol.com.domain > 192.168.199.75.57400: 2901 NXDomain[|domain]
23:01:13.908428 rule 7/0(match): pass out on bridge0: 192.168.199.75.64242 > ns1.ewol.com.domain: 2902+[|domain]
23:01:13.909729 rule 6/0(match): pass in on bridge0: ns1.ewol.com.domain > 192.168.199.75.64242: 2902[|domain]
23:01:14.909427 rule 7/0(match): pass out on bridge0: 192.168.199.75.59120 > ns1.ewol.com.domain: 2903+[|domain]
23:01:14.910706 rule 6/0(match): pass in on bridge0: ns1.ewol.com.domain > 192.168.199.75.59120: 2903 NXDomain[|domain]
23:01:15.192279 rule 6/0(match): pass in on rl0: 192.168.199.170.1159 > 64.233.179.99.http: S 280486837:280486837(0) win 64240 <mss 1460,nop,nop,sackOK>
23:01:15.192290 rule 6/0(match): pass in on bridge0: 192.168.199.170.1159 > 64.233.179.99.http: S 280486837:280486837(0) win 64240 <mss 1460,nop,nop,sackOK>
23:01:15.192296 rule 7/0(match): pass out on bridge0: 192.168.199.170.1159 > 64.233.179.99.http: S 280486837:280486837(0) win 64240 <mss 1460,nop,nop,sackOK>
23:01:15.192303 rule 7/0(match): pass out on vr0: 192.168.199.170.1159 > 64.233.179.99.http: S 280486837:280486837(0) win 64240 <mss 1460,nop,nop,sackOK>
23:01:15.216034 rule 6/0(match): pass in on vr0: 64.233.179.99.http > 192.168.199.170.1159: S 4262334245:4262334245(0) ack 280486838 win 8190 <mss 1460>