LarvitzJust spent way too long wrestling with a 400-line pf.conf and asymmetrical routing. 😵💫
The culprit? Classic rule ordering. A slightly too broad rule (with quick) near the top was happily catching traffic and creating states without the reply-to option before my intended rule could even look at it.
The packets were flowing, just... not back the right way. Debugging that was significantly harder than I expected.
I am officially logging off to take a nap. 💤