If your setup does not conform to spec - debug
First thing to check: is PF enabled?
$ sudo pfctl -si | grep Status Status: Enabled for 20 days 06:28:24 Debug: Loud
Does enabling/disabling PF make a difference?
Do a ruleset walkthrough, based on pfctl -s rules output
$ sudo pfctl -sr scrub in all fragment reassemble block return log all block return log quick from <bruteforce> to any anchor "ftp-proxy/*" all