language flexibility The order of options is flexible in most cases now. OpenBSD 3.2 required: block in log quick on dc0 from any to any port 80 flags S/SA keep state label "xyz" OpenBSD 3.3 allows that to be written in different order, too: block in quick log on dc0 from any to any port 80 label "xyz" flags S/SA keep state or block in log quick on dc0 from any to any port 80 keep state label "xyz" flags S/SA