As I mentioned
http://www.daemonforums.org/showthre...5892#post37916 you have to check the output of
pfctl -vvs rules.
Only this will proof whether the rules for outbound traffic on the internal interface really have any effect. In other words do these rules have non-zero values for the "Packets", "Bytes", "States" and "State Creations" counters?