# /etc/pf.conf
include "/etc/pf.conf.$PF_VERSION"
Then create /etc/pf.conf.6.9, /etc/pf.conf.7.0, etc.
On macOS, the built-in PF is part of the system kernel. Upgrading macOS (e.g., 12.x to 13.x) updates the kernel’s PF API. However, if you later install a newer pfctl via Homebrew or MacPorts, that userland tool may demand a kernel API version your macOS does not yet support. pf configuration incompatible with pf program version
If you’re writing an application or tool that generates pf.conf: # /etc/pf
If you accidentally installed sysutils/pf or security/pf from ports, it may have placed a newer pfctl in /usr/local/sbin. To resolve: Then create /etc/pf