Skip to content

launchd – pfctl correctly shows blacklisted and whitelisted ips but shows its disabled

  • by
Spread the love


I am finding that when I do sudo pfctl -s info, I find that it shows Status: Disabled for 0 days 00:14:45.

Have the following file in /Library/LaunchDameons/my.com.apple.pfctl.plist

<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
    <key>Label</key> <string>my.netfilter.pfctl</string>
    <key>Disabled</key> <false/>
    <key>RunAtLoad</key> <true/>
    <key>WorkingDirectory</key> <string>/var/run</string>
    <key>Program</key> <string>/sbin/pfctl</string>
    <key>ProgramArguments</key>
    <array>
        <string>pfctl</string>
        <string>-e</string>
        <string>-f</string>
        <string>/etc/pf.conf</string>
    </array>
</dict>
</plist>

However if I do something like

sudo pfctl -a whitelist -t whitelist -T show

it correctly shows the ip addresses in that table.

Does anybody know why this could be?

Leave a Reply

Your email address will not be published. Required fields are marked *