I have my pfctl enabled on my Mac and after I restart my laptop it's disabled. I noticed that sometimes when the laptop boots into Desktop the pfctl is enabled and then it gets disabled.
How can I find out what app/service/... is disabling the pfctl? Is there a log file for this (and where is it located)?
Is there a better alternative to pfctl so I can block some ports?
I only have couple of apps that start immediately: docker, istats, open vpn, express vpn, tunnelbrick, alfred4, Kitematic, Logitech mouse app