покажите pf.conf и расскажите, какая у вас ОС?

ос FreeBSD -7.0, ядро generic

pf.conf

table <BRUTEFORCES> persist

udp_services=«{domain,ntp}»

tcp_services=«{ftp-data,ftp,domain,www,https,ssh}»

icmp_allowed=«echoreq»

set block-policy return

set skip on lo0

set skip on $int_if

scrub in all

nat on $ext_if from $int_if:network to any -> $ext_if

rdr on $int_if inet proto tcp from any to any port 80 -> 127.0.0.1 port $proxy_port

#rdr pass on $int_if proto tcp from any to any port 21 -> 127.0.0.1 port 8021

block all

antispoof log quick for { lo0, $int_if, $ext_if }

block drop in log quick on $int_if from !$int_if:network to any

block drop log quick from <BRUTEFORCES>

#pass quick on {tun0, tun1} inet all

pass out proto tcp to any port $tcp_services keep state

pass out proto udp to any port $udp_services keep state

pass in inet proto icmp all icmp-type $icmp_allowed keep state

pass out inet proto icmp all icmp-type $icmp_allowed keep state

(:

почему-то заработало :) будем разбираться