When your Packet Filter ( ) configuration is incompatible with the program version, it usually results in errors like pfctl: DIOCADDRULE: Invalid argument There were error(s) loading the rules
net.pf.version: 1.8.0
This forces pfctl to generate a brand new binary ruleset that matches both the running kernel and the current userland version.