Do not forget the trace in the pf.conf that something went wrong during rules generation to be able to at least detect what is going on