This is a PSA for any pfatt users out there. PFsense 2.7 removed the functionality needed to get netgraph working. I compiled my own modules from the source and it was not enough. Upgrade to PFsense Plus and use its module to bypass or migrate OPNsense.
Good luck with your decision! Maybe someone better can make it work. but I could not after many hours of trying. Ever since 2.5.0 its been getting harder and harder… Maybe look at bypassing with a SFP module with integrated ONT. Check the DSL reports forums for your respective carrier. XGS-PON also has ONT SFP+ modules that you can use to bypass.