[jggimi]

Here's a second guess:

no state

Your pass rule is for outbound traffic without state. Because no state is established, you must add a pass rule to permit inbound traffic. Another option would be to permit state to be established.