Upgrading from 14.3-p6 to 15.0: ipfw_ctl3 invalid option 98v0, 97v0

[openglx]

Hi all,

I had some minor trouble with the ipfw blocking all connections when I upgraded from FreeBSD 14.3-RELEASE-p6 to FreeBSD 15.0-RELEASE on my Intel NUC home server.
My installation is very vanilla: originally installed from 14.1, upgrading with freebsd-update, ZFS root, thick jails with vnet, no pkgbase.

Before upgrading I've read the release notes and the upgrade documentation at https://www.freebsd.org/releases/15.0R/installation/#upgrade-binary and found nothing particularly worrying for my setup.

I've confirmed I was on 14.3-p6 before upgrading, running freebsd-update fetch install said no updates pending. It's possible I wasn't on the latest kernel but certainly on latest userland.
I had no errors on freebsd-update upgrade -r 15.0-RELEASE or freebsd-update install.
After reboot, entered GELI password, boot screen as normal, system loading as normal.
I started seeing several errors on console

ipfw: ipfw_ctl3 invalid option 98v0

The code

98v0

sometimes changed to

97v0

or

99v0

.

The computer was unable to reach any host on the network, even ping to its gateway would return

ping: sendto: Permission denied

.

Trying to check what could be wrong, I noticed that ipfw list would error with:

ipfw: retrieving config failed: Invalid argument

and the console would log

ipfw: ipfw_ctl3 invalid option 97v0

I knew I was in uncharted territory running a 15.0 kernel but 14.3 userland.
I completed the upgrade with freebsd-update install and rebooted once more.
The problem when away on the host system but I still see this error happening on any vnet jail.
Fortunately the fix appears to be as simple as upgrading each jail and restarting them.

Could you please advise what have I done wrong, or if there'a any additional information I could present to help anyone else in the future?

Thanks for the great work and congratulations on the successful release.