Someone

WAN_IF = "fxp0"
LAN_IF = "rl0"

WIP_MYIP = "192.168.0.155"
LIP_MYIP = "10.0.0.155"

WIP_IBM = "192.168.0.50"
LIP_IBM = "10.0.0.50"

scrub in all

rdr on $WAN_IF proto tcp from any to $WIP_IBM -> $LIP_IBM
nat on $WAN_IF from $LIP_IBM to any -> $WIP_IBM

block in all # if I set this to pass, I can access the ftp server on LIP_IBM, but in block no, why ? (filter rule below)
pass out all

pass in on $WAN_IF proto tcp from any to $WIP_MYIP port 22 flags S/SA keep state
pass in on $WAN_IF proto tcp from any to $LIP_IBM port 21 flags S/SA keep state # this rule are not working, why ?