How do I use pf/IceFloor to block an outgoing connection to an IP address?
My friend, if memory serves me well, you will need to add 

net.inet.tcp.icmp_may_rst=0


to /etc/sysctl.conf, and then modify the running kernel-

sudo sysctl -w net.inet.tcp.icmp_may_rst=0


That should do the trick.  If no /etc/sysctl.conf exists, here is a shortcut:

sudo echo “net.inet.tcp.icmp_may_rst=0” &gt;&gt; /etc/sysctl.conf
sudo chmod 644 /etc/sysctl.conf


Hope that resolves the inconsistency with PF.  

F.