A stab in the dark, but don't you want to keep state on those rules? e.g.
pass out on $ext_if proto { tcp, udp, icmp } all keep state
(This is assuming your version of FBSD & pf don't implicitly keep state already.)
---
P.S. If that's not working, maybe you should post your full pf ruleset and the full nmap scan command you're trying to run.
__________________
Kill your t.v.
|