1# pfctl should catch flags that never match, ie, where any flags 2# are tested that are always masked off. Test some more combinations 3# while we're here. 4 5pass proto tcp from any to any flags F/F 6pass proto tcp from any to any flags S/S 7pass proto tcp from any to any flags R/R 8pass proto tcp from any to any flags P/P 9pass proto tcp from any to any flags A/A 10pass proto tcp from any to any flags U/U 11pass proto tcp from any to any flags E/E 12pass proto tcp from any to any flags W/W 13pass proto tcp from any to any flags FSRPAUEW/FSRPAUEW 14pass proto tcp from any to any flags /FSRPAUEW 15pass proto tcp from any to any flags S/SAFR 16pass proto tcp from any to any flags /SA 17 18pass proto tcp from any to any flags S/ 19pass proto tcp from any to any flags / 20pass proto tcp from any to any flags S/AFR 21pass proto tcp from any to any flags A/FSRPUEW 22pass proto tcp from any to any flags FSRPAUEW/FSRPAUE 23