pfSense pfctl
Installing pfSense firewall remotely has it challenges. Especially when it is installed on Proxmox or ESXi. One trick is to disable packetfiltering to be able to set the first firewallrules:
`pfctl -d'
One caveat though, when you change something in the web UI you have to give this command again. Apparently changes in the web UI set packetfiltering back on.