# Save current active rules (compatible with running kernel) pfctl -sr > /etc/pf.current.rules

If you were in the middle of a system update (e.g., using freebsd-update or sysupgrade on OpenBSD), ensure all steps, including the final reboot, were completed.

An administrator might manually load pf.ko from /boot/kernel/ while the system's userland is from an older release (e.g., mixing 13.0-RELEASE userland with 14.0-RELEASE kernel modules).