On 04.11.2003, at 02:21, Tracy Phillips wrote:

> I am under the impression that ipf rules are were evaluated and the 
> last
> rule that matched was the one that triggered a block.

Rules were processed on a first-match basis in pb18, too, but it didn't 
really make a difference because you could only have pass rules. So the 
rule order obviously didn't matter.

> Hint: rules are evaluated on a first-match basis (i.e. the action of 
> the
> first rule to match a packet will be
> executed). This means that if you use block rules, you'll have to pay
> attention to the rule order.
> Everything that isn't explicitly passed is blocked by default.
>
> This sounds more like ipfw doesn't it?

Yeah, or ipf with the "quick" statement on each rule. I think this is a 
good thing to do. Makes things more logical and faster, too (by not 
having to evaluate all rules for each packet).

- Manuel