'everything was upside down'
we inherited last matching rule wins from IPfilter, so
block pass from 192.168.103/24
and
pass from 192.168.103/24 block
are *not* equivalent
Load the sample files with
$ sudo pfctl -vnf samples/example001
$ sudo pfctl -vnf samples/example002