relevant when the dummy ruleset can't be loaded, we still want to enable pf, otherwise the real ruleset (even if that does load correctly) won't be active. might happen on a non-GENERIC kernel or after an update (before /etc is manually updated). reported by Jim Rees. ok frantzen@OPENBSD_3_8