PF pfctl: DIOCADDRULE: Operation not permitted when # pfctl -f /etc/pf.conf @ 15.1-RELEASE

[epopen]

Original from Thread 103052

Hi All

I'm upgraded base system with 15.1-RELEASE
I tried to reload pf() rules by # pfctl -f /etc/pf.conf
But I got

pfctl: DIOCADDRULE: Operation not permitted

/var/log/message haven't any new message.

And got security/py-fail2ban update table failed as follows.

2026-07-06 09:21:21,887 fail2ban.utils          [83696]: ERROR   19dcc6829230 -- exec: /usr/bin/xargs -I $ /sbin/pfctl -a f2b/'apache-noscript' -t 'f2b'-'apache-noscript' -T add $
2026-07-06 09:21:21,887 fail2ban.utils          [83696]: ERROR   19dcc6829230 -- stderr: 'pfctl: No error: 0'
2026-07-06 09:21:21,887 fail2ban.utils          [83696]: ERROR   19dcc6829230 -- stderr: 'xargs: /sbin/pfctl: exited with status 255; aborting'
2026-07-06 09:21:21,887 fail2ban.utils          [83696]: ERROR   19dcc6829230 -- returned 1

Content of /etc/rc.conf.d/securelevel

kern_securelevel_enable="YES"
kern_securelevel="2"

I assume the problem is bug because 15.0-RELEASE had not the problem I remember and 15.1-RELEASE release notes have not change about pf().
Or my missed something?

I found similar report PR 291981, it start from 15.0-RELEASE and status is open still

Could all please help me with this problem?
Thanks