Building the Network You Need with OpenBSD's PF: BSDCan, Ottawa May 6th, 2009
Prev |  | Next

# ruleset-optimiation

Enable or tweak the ruleset optimizer, possible values `none`, `basic` (default), `profile`

    set ruleset-optimization basic

or

    $ sudo pfctl -o basic

With the `basic` setting the optimizer

- Removes duplicate rules

- Removes rules that are subsets of other rules

- Merges rules into tables if appropriate

- Changes rules order to improve performance