pflog: log packet dropped by default rule with drop

Taken from: openbsd/src@7b8683a1743e7

sys/netpfil/pf/if_pflog.c

@@ -217,7 +217,9 @@ pflog_packet(struct pfi_kkif *kif, struct mbuf *m, sa_family_t af, u_int8_t dir,
 	bzero(&hdr, sizeof(hdr));
 	hdr.length = PFLOG_REAL_HDRLEN;
 	hdr.af = af;
-	hdr.action = rm->action;
+	/* Default rule does not pass packets dropped for other reasons. */
+	hdr.action = (rm->nr == (u_int32_t)-1 && reason != PFRES_MATCH) ?
+	    PF_DROP : rm->action;
 	hdr.reason = reason;
 	memcpy(hdr.ifname, kif->pfik_name, sizeof(hdr.ifname));