Flexibility Anchors Placeholder for rules to be loaded later Changing anchor does not change main ruleset anchor "authpf/*" Anchors can be conditional: anchor "customer1" on vlan101 proto { tcp, udp, icmp } Anchors can be nested The same anchor can be called multiple times