PF + NAT problem....

Jag har försökt få igång pf på min fbsd-burk men inte utan problem.
NAT funkar bra tills jag skriver in sista block regeln som blockar allt.
Tydligen ska jag omdirigera nåt men jag vet inte hur jag ska göra det.
Nån som har nån lösning?

Bifogar min pf.conf:

#####################################################
nat on rl0 proto {tcp udp icmp} from 192.168.0.2 to any -> aa.bb.cc.dd

# intern trafik
pass in quick on rl2 inet from 192.168.0.1 to 192.168.0.2 keep state
pass out quick on rl2 inet from 192.168.0.1 to 192.168.0.2 keep state

#loopback
pass in quick on lo inet from any to any
pass out quick on lo inet from any to any

# apache till/från server
pass in log quick on rl0 inet proto tcp from any port 80 to aa.bb.cc.dd port 80 keep state
pass out log quick on rl0 inet proto tcp from any port 80 to aa.bb.cc.dd port 80 keep state

# ssh till/från server
pass in log quick on rl0 inet proto tcp from any port XXXXXX to aa.bb.cc.dd port XXXXXX keep state
pass out log quick on rl0 inet proto tcp from any port XXXXXX to aa.bb.cc.dd port XXXXXX keep state

block in log quick inet from any to any
block out log quick inet from any to any

Nu har jag förenklat den temporärt men det funkar ändå inte.
För övrigt så använde jag fwbuilder för att generera pf.conf

####################################################
nat on rl0 proto {tcp udp icmp} from 192.168.0.2 to any -> aa.bb.cc.dd

block in inet from any to any
block out inet from any to any

# Allow traffic internally from/to server
pass in on rl2 inet from 192.168.0.1 to 192.168.0.2 keep state
pass out on rl2 inet from 192.168.0.1 to 192.168.0.2 keep state

pass out on rl0 inet proto { tcp, udp, icmp } from aa.bb.cc.dd keep state