I'm debuggin some pf issues, one of them is needing to perform a pfctl -Fr after boot up, otherwise all (sometimes some) rules in my anchor seem to have no effect (I have a blockall rule, then poking holes).
For example, I am running a test Zabbix server on a VM, the hypervisor has Zabbix agent...