ok, found the problem, and is NOT pf related. in rc.conf, somehow, winbind_enable was set to "NO". Changed it to "YES" and with pf enabled all is ok now from a pf point of view. on the other hand, samba is yelling in agony, error agony that is. ow well, we can't all be perfect :P Thx for all the help.