On Sun, Nov 1, 2009 at 4:16 PM, ghe <g...@slsware.com> wrote: > This does bring a question to my mind, though. Why is this ruleset > optimization kept a secret? It's a *very* major piece of pf, IMHO. I did a > significant amount of reading and looking around, and I never saw it > discussed in any detail at all until I asked the list about my iptables > wannabe pf ruleset...
The optimizer is documented in both the pfctl and pf.conf man pages, and the one for pf.conf tells you exactly what it does.