Name resolution has nothing to do with 100% packet loss. More likely, there's a block rule in PF preventing ICMP packets from passing. But even if it's something else, the
tcpdump(8) program can help you determine a root cause.
- If you add logging to your pass and block rules, you can use tcpdump(8) with your pflog(4) device and watch for passed/blocked traffic.
- If traffic is correctly passed but no responses are being received, you can use tcpdump(8) with your gif(4) interface to monitor traffic.
- Does an ARP request get sent?
- Was an ARP reply received?
- Do you see the ping requests?
- Do you see any replies?