On Thu, Aug 15, 2013 at 9:36 AM, Henning Brauer <lists-openbsdb...@bsws.de> wrote: > the old macro expansion issue. pretty much unfixable. > > fwiw, I tend to do > table <self> persist { self } > and the use <self>.
Just out of curiosity, is there a reason why you don't use (self) instead? Unless I misunderstood the code, this creates/reuses an implicit <self> table under the _pf anchor, which is automatically updated with any IP changes. The rule evaluation performance should be the same.