version = pf_major_version() if version >= 7: conf = "match in all scrub (no-df)\n" else: conf = "scrub in all\n"
Then restart PF:
shutdown -r now
The "incompatible version" error is a safety mechanism preventing the kernel from loading rules it cannot understand. In 90% of appliance cases (pfSense/OPNsense), the fix is simply ensuring the configuration generator (the GUI/PHP backend) matches the running OS version, often requiring a simple reboot or a clean install rather than a direct restore. pf configuration incompatible with pf program version