Indeed it does, but not by hacking up `-s rules`. pfctl(8) lists all
the various things you can display with -s. 'options' (as per
pf.conf(5)) do not seem to be among them, however, which  I agree is
unfortunate. It also doesn't help that the manpage say, next to, -s
Rule:
"Note that the ``skip step'' optimization done automatically by the
kernel will skip evaluation of rules where possible." which seems to
imply that `-s rules` has something to do with `set skip`.

I don't know about all the options. I kind of think these are more operations limits or something. I am sure I don't use the right words here, but the options would be for optimization of efficiency of busy system. In low usage, the options wouldn't be in the way in any case.

I see the set skip as all or nothing, oppose to options that are capacity related.

I could be wrong, but I don't see that as the same thing at all.

The show rules, or what ever it may be call should show the go/no go stuff and if you want optimization, then you can always looks else where for capacity related issues.

I don't think the two should be at the same place here, but again, that's just my thinking.

Look logical to me, but I am not saying I hold all the truth here either.

Reply via email to