How to start pfctl at boot
Is there a way to achieve the same without disabling System Integrity Protection?


Yes*, in System Preferences / Security &amp; Privacy / Firewall Options..., check "Enable stealth mode" and turn on Firewall.

Somehow this enables PF. You can check by running sudo pfctl -s info.

*Tested on High Sierra and Mojave