Thanks for clarifing that for me Manuel.
> -----Original Message-----
> From: Manuel Kasper [mailto:mk at neon1 dot net]
> Sent: Tuesday, November 04, 2003 12:29 AM
> To: Tracy Phillips
> Cc: m0n0wall at lists dot m0n0 dot ch
> On 04.11.2003, at 02:21, Tracy Phillips wrote:
> > I am under the impression that ipf rules are were evaluated and the
> > last rule that matched was the one that triggered a block.
> Rules were processed on a first-match basis in pb18, too, but
> it didn't really make a difference because you could only
> have pass rules. So the rule order obviously didn't matter.
> > Hint: rules are evaluated on a first-match basis (i.e. the
> action of
> > the first rule to match a packet will be executed). This
> means that if
> > you use block rules, you'll have to pay attention to the rule order.
> > Everything that isn't explicitly passed is blocked by default.
> > This sounds more like ipfw doesn't it?
> Yeah, or ipf with the "quick" statement on each rule. I think
> this is a good thing to do. Makes things more logical and
> faster, too (by not having to evaluate all rules for each packet).
> - Manuel