Question
Would the second example still work if the order of the rules are reversed?
Code:
# block but don't log some log polluters
block log all
block quick inet proto udp from any to port {netbios-ns, netbios-dgm }
block quick inet proto udp from any to port { bootps,bootpc }
Please motivate your answer and if possible show an example pflog log file as proof