smallies

network and broadcast address lookup:
   pass in on dc0 from dc0:network to any keep state
   block in on ! dc0 from any to dc0:broadcast

the order requirement (options, scrub, queue, NAT, filter) can be disabled:
   set require-order no

flags S syntax removed; full set needs to be specified now: flags S/SA. Makes commonly seen errors more difficult