- avoid flushing the firewall rules upon install by using pf anchors - restart service after upgrade if it was running before PR: 261304 MFH: 2022Q1