Debugging your setup

If your setup does not conform to spec - debug

First thing to check: is PF enabled?

$ sudo pfctl -si | grep Status
Status: Enabled for 20 days 06:28:24            Debug: Loud

Does enabling/disabling PF make a difference?

Do a ruleset walkthrough, based on pfctl -s rules output

$ sudo pfctl -sr              
scrub in all fragment reassemble
block return log all
block return log quick from <bruteforce> to any
anchor "ftp-proxy/*" all