On rare occasions, a stale pf kernel module remains loaded after a partial update, while the boot-time scripts load a different userland version.
: Use freebsd-update fetch followed by freebsd-update install . This ensures all components, including the pf kernel module and pfctl , are at the same version. pf configuration incompatible with pf program version
PF syntax changes between major versions. For instance, a syntax change in how table loading or state tracking is handled can trigger this mismatch. How to Troubleshoot and Fix On rare occasions, a stale pf kernel module
If you recently upgraded the kernel without updating userland, perform a complete upgrade. On rare occasions
There are three primary reasons this incompatibility happens: 1. Operating System Upgrades