Hello pf@ and stable@, I opened a bug with a patch to support loading $pf_default_rules - which defaults to "block drop log all" - in case loading pf.conf fails during boot. This is to avoid having 0 rules loaded. The default is to have the new feature disabled, keeping the existing behaviout.
The bug and patch and more info can be seen at [1]. Questions welcome, here or in the bug. Best regards, Thomas Steen Rasmussen [1] https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=256410
