PF TAGged jail traffic fails pass rule on egress

[Beeblebrox]

Correction to previous message; should be:
> After your ideA re "no actual packets on lo2" I ran tcpdump on that
> interface; indeed no traffic shows up. I moved the jails to a new
> vlan1 ON WAN0 (INSTEAD OF LO0) with /24 subnet, with x.x.0.1 empty and
> jails starting from x.x.0.2/32. This obviously facilitates NAT from
> pf in that NAT is now not needed for inter-jail communication.
> However, nothing changes for the greater problem of packet tagging as
> "tcpdump -i vlan1" shows no packet traversal as was the case on lo2.

So now, jails are on a vlan hosted on wan0 (egress) but tcpdump still shows no packet traversal on that interface. hardware driver is re :
wan0: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> metric 0 mtu 1500
	options=8209b<RXCSUM,TXCSUM,VLAN_MTU,VLAN_HWTAGGING,VLAN_HWCSUM,WOL_MAGIC,LINKSTATE>
	inet 192.168.1.10 netmask 0xffffff00 broadcast 192.168.1.255 
	media: Ethernet autoselect (100baseTX <full-duplex>)

-- 
FreeBSD_amd64_11-Stable_RadeonKMS
Please CC my email when responding, mail from list is not delivered.