Two ways to skip checking the entire rule set

1) If a rule has a "quick" keyword, action is taken and no subsequent rules are checked
2) If a packet matches a rule with a "group" keyword, only rules tagged with the group are checked