table { 1.2.3.4 !5.6.7.8 10.0.0.0/8 127.0.0.1 ::1 fe80::1 } table const { ::1 fe80::/64 } table const { 1.2.3.4 !5.6.7.8 ::1 ::2 ::3 } file "/dev/null" { 4.3.2.1 } match out on lo0 inet from to nat-to 127.0.0.1 match out on ! lo0 inet from ! to nat-to 127.0.0.1 match in on lo0 inet from to rdr-to 127.0.0.1 match in on ! lo0 inet from ! to rdr-to 127.0.0.1 match in from to any match in from ! to any match out from any to ! match out from any to pass in from to any flags S/SA keep state pass out from any to flags S/SA keep state pass in from to any flags S/SA keep state pass in from to any flags S/SA keep state pass out from any to ! flags S/SA keep state pass out from any to ! flags S/SA keep state