Those rules don't make an OBSD firewall stealth. Making sure that the block policy is
drop does
An alternative could be to use a bridge, where the 2 interfaces have no IP addresses but where you still can filter traffic.
BTW
keep state already has been the default for several releases, and thus does not need to be specified anymore