For each filter the longest matching URL pattern is the one that should be used.
If you have multiple filters, the order in which they are invoked is determined their order in your deployment descriptor. There is a link to the servlet spec in my signature. This is the best place to go for questions like this.
Since filters are covered in the servlet spec, not the JSP spec, I'm going to move this thread to our Servlets forum.