OpenBSD developers have a sense of humor: "pass out quick keep state" is a valid firewall rule...