Hello Brian, I forgot to say that my site set did include the already prepared pf.conf, but not rc.conf.local, where pf was set to be disabled. As the result, pf started with rules for nat/firewall, not the default ones. And that created the “problem”.
Martin
