last match wins


obviously, not going to fly with scrub and NAT being actions on rules

repeat scrub/NAT statements on (almost) every rule?!?

so we need rules that match and apply actions on the fly

match rules ftw!