blocklistd surprise

[Patrick Welche <prlw1%welche.eu@localhost>]

I just happened to notice

# tail -2 /var/log/messages
Nov 27 16:20:59 mail blocklistd[597]: blocked 186.96.145.241/32:22 for 1728000 seconds
Nov 27 16:20:59 mail blocklistd[597]: blocked 186.96.145.241/32:22 for 1728000 seconds
# npfctl rule blocklistd list | grep 186.96
# 

so blocklistd says 186.96.145.241 was blocked, but npf doesn't think so?

# npfctl rule blocklistd list | wc 
     437    6555   38127

so some rules are being set...

Thoughts on where to look?


Cheers,

Patrick