Index: sys/netpfil/pf/pf_ioctl.c
===================================================================
--- sys/netpfil/pf/pf_ioctl.c
+++ sys/netpfil/pf/pf_ioctl.c
@@ -1602,6 +1602,9 @@
 			    V_ticket_pabuf));
 			ERROUT(EBUSY);
 		}
+		if (rule->src.addr.p.dyn != NULL ||
+		    rule->dst.addr.p.dyn != NULL)
+			ERROUT(EINVAL);
 
 		tail = TAILQ_LAST(ruleset->rules[rs_num].inactive.ptr,
 		    pf_rulequeue);