If you would like to log dropped packets rather than simply ignoring them you can add the log statement to a rule. For example, to block all incoming SMTP traffic and log all attempts to connect to this service add:
block in log on $ext_if proto tcp from any to $internal_net port 25