match rules


of course, just following the rule pointer from the state doesn't cut it any more

these actions are now fields inside the pf_state structure
updated every time a rule matches and modifies the action in question

states carry a list of match rules that matched