last match wins


pf, inherited from ipf, ist "last match wins"

there is exactly one last matching rule

actions from that and only that rule get taken
slightly weakened later, tag and queue on the fly