optimizer in action


input ruleset

    pass in from 10/8
    pass in from 10.0.0.1
    pass in from 10.0.0.2
    pass in to { 10.1.0.1, 10.1.0.2, 10.1.0.3 10.1.0.4 }
    pass in to { 10.1.0.5, 10.1.0.6 }

optimized

    pass in inet from 10.0.0.0/8 to any flags S/SA
    pass in inet from any to <__automatic_edccf0fc_0> \ 
        flags S/SA