nat-anchor foo
nat-anchor foo all
nat-anchor foo from any to any
nat-anchor foo inet proto tcp from 10.0.0.0/8 to !1.2.3.4
nat-anchor foo inet proto { udp, tcp } from { 10.1.2.3, 10.2.3.4 } port { 2000, < 2100 } to { 10.3.4.5, 10.4.5.6 } port { < 1000, > 1100 }
rdr-anchor bar 
rdr-anchor bar all
rdr-anchor bar from any to any
rdr-anchor bar inet proto tcp from 10.0.0.0/8 to !1.2.3.4
rdr-anchor bar inet proto { udp, tcp } from any to 10.1.2.3/24 port 25
binat-anchor baz
binat-anchor baz all
binat-anchor baz from any to any
binat-anchor baz inet proto tcp from any to any
anchor foo
anchor bar all
anchor bar from any to any
anchor foo inet
anchor foo inet6
anchor foo inet all
anchor foo proto tcp
anchor foo inet proto tcp from 10.1.2.3 port smtp to 10.2.3.4 port ssh
anchor foobar inet6 proto udp from ::1 port 1 to ::1 port 2
anchor filteropt out proto tcp to any port 22 user root
anchor filteropt in proto tcp to (self) port 22 group sshd
anchor filteropt out inet proto icmp all icmp-type echoreq