1) FTP program starts up 2) FTP packet hits xl2 (my internal interface) 3) Nothing else happens
The packet is not hitting xl0 or xl1 (my external interfaces) nor is it hitting lo0. The same thing happens for Squid, as it is also listening on 127.0.0.1.
Add "log all" to all of your rules, and watch pflog0 while you try the FTP session again. Make sure you use the -env switches to tcpdump. Something to check on: that you have pass rules allowing those connections in on xl2.
If you're still stuck, post that output, the results of tcpdump -nvi xl2, and the entire pf.conf.
