Disable packet filter rules….
I noticed that for some reason if you turn off the packet filter under advanced options and then back on. Sometimes it ACTS like it is still off. Even after reboots or anything, until you recreate rules. In my case i block access to manage my pfsense box except from specific ip's and otherwise allow all other traffic both directions without NAT as i'm using it more as a router than a firewall, but still wanted to block access to manage it. Well after turning packet filtering back on my rules didn't work and the default allow all rule at the bottom worked because traffic went both directions in and out, but anyone could get to my management interface. I deleted the rules and recreated them and it worked again… just a little frustrating to figure out.