First off, there's only 1 actual ethernet card in the pf machine. It's a dial-up modem on the internet side so it's tun0 connected via serial port (external modem).
Secondly I seem to have painted myself into a corner here because I'm running pf on my laptop connected to the modem, and that's the only other machine with wireless that I can test with. I'll reconfigure things so a desktop machine's connected to the modem then I can test with the laptop as a wireless client. So far I'm running one of the 8054 lan-side switch ports connected to my main switch with other machines. There's no connection to the WAN jack on the 8054. I don't have much control over what the 8054 is passing to its DHCP clients, but I suspect it's only an IP address (no router/firewall, DNS server IPs). I'm using my ISP's DNS servers not my own, which puts the DNS on the other side of the firewall. The Kindle works here if I enter IP, gateway/router IP and DNS server IPs manually on it. I have no reason to run DHCPD other than this (all static here). I just have more control over what OpenBSD's DHCPD is passing to clients. Another option, not a very good one, is to use the laptop's internal ath0 interface and antennas in the lid configured as an access point, but I think the antennas will have a rather directional pattern. Another reason to free up the laptop though. I didn't expect to want wireless. Alan