Without more information, such as the rest of your ruleset (including any NAT rules), I can only recommend the following:
1. Add logging to every rule, whether pass or block. Your desired packets may be matching an earlier "quick", or not matching this rule for some reason.
2. Use tcpdump(8) with pflog(4) on the firewall, to see what rules are used with the packets of interest. You want to determine if they are being lost due to a block rule, or a pass rule that is not redirecting packets.
|