This is sort of an academic question, I guess. Hopefully, this is an ok place to post it.
Just wondering...it seems that most rule examples start out with "block in all/block out all", wouldn't it more efficient to put "block all" at the end of the rules and use "quick" to pass packets? That would be one less rule that gets parsed.
