Is 7 years too long to wait for an answer? I had been struggling with the same issue/question, and since yours was the only related post I could find, I figured I'd come back to share what I found. Try putting a slash and then the creatorid, like this:
I didn't test this on OpenBSD but I did test it on pfSense which I believe uses a very similar if not identical binary. -- View this message in context: http://openbsd-archive.7691.n7.nabble.com/Can-t-kill-a-state-with-pfctl-tp100879p314187.html Sent from the openbsd user - misc mailing list archive at Nabble.com.

