OpenBSD 4.7 and PF with NAT and rdr

[basn]

Hi i just installed a new box with 4.7, i am having trouble getting port redirection to work.
In 4.6 i did:

rdr pass on $ext_if proto tcp from !<deny_ips> to $ext_if port 3389 -> machine port 3389

That wont work for me now days, so i tried the new versions that i could think of and been reading the Docs but i cant get a grip on it this is the current thing i got in my config:

pass in on egress inet proto tcp from <known_ips> to (egress) port 3389 rdr-to $machine

The thing is that i get the port filtered if i apply "keep synproxy" i get the port open but msrdp isnt working, what am i doing wrong since i cant seem to figure this out myself? thanks in advance.