fix: validate pf state before stabilization

cmd/cli/dns_intercept_others.go

@@ -4,6 +4,7 @@ package cli
 
 import (
 	"fmt"
+	"time"
 )
 
 // startDNSIntercept is not supported on this platform.
@@ -23,8 +24,8 @@ func (p *prog) exemptVPNDNSServers(exemptions []vpnDNSExemption) error {
 }
 
 // ensurePFAnchorActive is a no-op on unsupported platforms.
-func (p *prog) ensurePFAnchorActive() bool {
-	return false
+func (p *prog) ensurePFAnchorActive() pfAnchorCheckResult {
+	return pfAnchorCheckSkipped
 }
 
 // checkTunnelInterfaceChanges is a no-op on unsupported platforms.
@@ -32,6 +33,10 @@ func (p *prog) checkTunnelInterfaceChanges() bool {
 	return false
 }
 
+func (p *prog) dnsInterceptIgnoredChangeReconcileDue(time.Time) bool {
+	return false
+}
+
 // scheduleDelayedRechecks is a no-op on unsupported platforms.
 func (p *prog) scheduleDelayedRechecks() {}