On Sun, Dec 28, 2014 at 9:35 AM, Harald Dunkel <ha...@afaics.de> wrote: > On 12/28/14 13:51, Maxim Khitrov wrote: >> >> These tables are under the hidden "_pf" anchor: >> >> pfctl -a _pf -t extern -T show >> > > Thats cool. Where did you find this? Searching on openbsd.org > for "_pf" revealed only > http://www.openbsd.org/papers/ven05-henning/mgp00011.txt . > This is surely something that should go to the man page or to > the FAQs for pf.
Read the source code when I wanted to know how "(<if>)" was implemented and whether there is any performance penalty associated with this construct.