Looks like these are your conflicting rules. > pass in quick inet proto tcp to port ftp divert-to 127.0.0.1 port 8021 > pass in on $ext_if proto tcp to port 21
The first rule needs to be on $int_if - you didn't specify an interface so it then defaults to all interfaces.
