Hello,
Got a few questions in regards to the "match" rules.
From what I understand - they do not create states, and, multiple rules are evaluated (i.e. it's not first/last match "wins")
The question is - why do these rules allow, for example:
match in on ix0 inet proto tcp from any to...
