> I have followed the FAQ on "building a router" almost vebatim.

So your packets are almost passing. I wasn;t aware of this router
section in FAQ, so I was looking there. Even one slight modification
can make pf behave totally different.