3 ms·
Anchors? Tables? Or my very favourite: last match wins, which shortens your ruleset considerably.
by purple_horse 13y ago
Anchors?
Tables?
Or my very favourite: last match wins, which shortens your ruleset considerably.
- simcop2387 13y agoAnchors look suspiciously like creating a new chain in iptables. Tables there doesn't seem to be any direct analog, though can be done similarly by creating a chain that matches the list of addresses you're interested in and forwarding the rules there. That said both of pf's versions look better than iptables. nftables looks like it does a better job of this like pf does, which is definitely a good thing.