Solved problem, but I'm mentioning it here for anyone searching the list archives. If you use ftp-proxy and are having a failure to add rules for the data-channel connections, with accompanying verbose mode log entries like "pf operation failed: Device busy", check the ftp-proxy command line and look for queues that no longer exist.
(Thanks phessler for a clue on this one :)
