pf rule question

[Rafał Brodewicz]

Hello.

While trying to configure pf to pass dhcp requests I've build a simple rule:

block log all
pass in log on $inf_if proto udp from { $int_if:network 0.0.0.0 } \
        port 68 to 255.255.255.255 port 67

But it seems that above rule pass out udp to port 68 (like it was having
keep state added), but it shouldn't, right?
Why and how is that possible?

Thanks in advance.

-- 
raff