* Nick Guenther <[EMAIL PROTECTED]> [2006-07-03 22:35]: > unfortunate. It also doesn't help that the manpage say, next to, -s > Rule: > "Note that the ``skip step'' optimization done automatically by the > kernel will skip evaluation of rules where possible." which seems to > imply that `-s rules` has something to do with `set skip`.
skip steps and set skip have noting to do with each other. set skip basically disables pf on a per-interface basis. skip steps is an optimization in rule processing you can safely ignore. it Just Works in the background and saves you CPU cycles :) -- BS Web Services, http://www.bsws.de/ OpenBSD-based Webhosting, Mail Services, Managed Servers, ... Unix is very simple, but it takes a genius to understand the simplicity. (Dennis Ritchie)