CVS: cvs.openbsd.org: src

[Ryan Thomas McBride <mcbride_(_at_)_cvs_(_dot_)_openbsd_(_dot_)_org>]

CVSROOT:	/cvs
Module name:	src
Changes by:	mcbride_(_at_)_cvs_(_dot_)_openbsd_(_dot_)_org	2006/10/11 02:42:31

Modified files:
	sys/net        : pfvar.h pf.c 
	sbin/pfctl     : parse.y 

Log message:
Allow the 'quick' keyword on an anchor. IFF there is a matching rule inside
the anchor, terminate ruleset evaluation when stepping out of the anchor.

This means that if you absolutely want the anchor to be terminal, you
probably want to use a 'block all' or 'pass all' rule at the start of the
anchor.

ok dhartmei@ henning@ deraadt@