Re: PF quick

[kjell@pintday.org]

> can someone tell me what the pros and cons are of using the "quick"
> keyword in packet filter? for example, do rules with "quick" use more
> cpu power?
> 
> or is it just a matter of taste whether someone wants to use it or not?

"quick" stops evaluating rules upon a match.
This means if rules later on in your ruleset would also have matched
the packet in question they won't get evaluated.

Without it, the last match always wins.

Technically, using quick rules should speed processing a bit,
since a match won't have to evaluate all the rules.

The gain is probably pretty minimal, though.


-kj