might want to look at mapping
since it's PF based, what does /etc/pf.conf looks like on netgate PFSense?

You might want to use tcpdump on /dev/pflog0 to troubleshoot and see what exactly your rules are missing (or insight on rules that isn't working as it should).

good place to start would be https://docs.netgate.com/pfsense/en/latest/diagnostics/packetcapture/tcpdump.html