More than one rule: evaluation

'everything was upside down'

we inherited last matching rule wins from IPfilter, so

	block
	pass from 192.168.103/24

and

	pass from 192.168.103/24
	block

are *not* equivalent

Load the sample files with

$ sudo pfctl -vnf samples/example001
$ sudo pfctl -vnf samples/example002