Although upgrading the vyos image initially solved my issue (see related post Missing firewal logs ); the problem re-appeared… Doing another image update gives me logs for an hour or so; after that new blocked traffic is no longer logged. I can see the counters increase whenever I force hitting the default (or any log enabled) firewall entry, but when I run the show log firewall name XXX-XXX I only get old entries and no new ones…