SOLVED I apologize for all the noise.
$ grep 'domain-name-servers' /etc/dhcpd.conf option domain-name-servers 192.168.0.1; It didn't occur to me to ping an ip address until Bryan suggested I run tcpdump (thanks Bryan). Seeing all those IPs scroll along the console gave me the idea of pinging an IP, which then made me realize pf wasn't failing to pass/blocking packets after all. I had a Cradlepoint converting my Sprint broadband signal to ethernet, thus the 192.168.0.1 nameserver. That was an additional link in the chain I hadn't accounted for, so when I switched to a cable modem I didn't change things accordingly. This error is painfully obvious to most of you, so again, sorry for the noise of this thread, and thanks for not dropping me in an acid bath. -Scott
