match on lo0 inet proto tcp from 192.168.1.1 port = 1024 to any port = www match proto tcp all match proto tcp all match proto tcp all match in proto tcp all match in proto tcp all match in proto tcp all scrub (reassemble tcp) match in proto tcp from to any match in proto tcp from ! to any match in inet proto tcp from 10.0.0.1 to 10.0.0.3 match in inet proto tcp from 10.0.0.1 to 10.0.0.4 match in inet proto tcp from 10.0.0.2 to 10.0.0.3 match in inet proto tcp from 10.0.0.2 to 10.0.0.4 match in log on lo0 proto tcp all scrub (min-ttl 25) match in log on lo0 inet6 proto tcp from (lo1000000) to 2000::1 match in log on lo0 inet6 proto tcp from (lo0) to 2000::1 match in log on lo0 proto tcp all match in log on lo1000000 proto tcp all match in on lo0 proto tcp all match in on lo0 proto tcp all scrub (no-df min-ttl 15 max-mss 224) match in on lo0 proto tcp all scrub (max-mss 224) match in on lo0 proto tcp all scrub (no-df min-ttl 15 max-mss 224) match in on lo0 proto tcp all scrub (no-df) match in on lo0 proto tcp all scrub (no-df min-ttl 15 max-mss 224) match in on lo0 inet proto tcp from (lo0) to any match on lo0 proto tcp all scrub (max-mss 224) match out proto tcp all match out proto tcp from any to ! match out proto tcp from any to match out log on lo1000000 inet proto tcp from any to 10.0.0.1 scrub (no-df max-mss 224) match proto tcp all scrub (random-id) match proto tcp from any to any port = www match in proto tcp from to any port = www match in proto tcp from ! to any port = www match in inet proto tcp from 10.0.0.1 to 10.0.0.3 port = www match in inet proto tcp from 10.0.0.1 to 10.0.0.4 port = www match in inet proto tcp from 10.0.0.2 to 10.0.0.3 port = www match in inet proto tcp from 10.0.0.2 to 10.0.0.4 port = www match in log on lo0 proto tcp from any to any port = www scrub (min-ttl 25) match in log on lo0 inet6 proto tcp from (lo1000000) port = www to 2000::1 match in log on lo0 inet6 proto tcp from (lo0) port = www to 2000::1 match in log on lo0 proto tcp from any port = www to any match in log on lo1000000 proto tcp from any port = www to any match in on lo0 proto tcp from any port = www to any scrub (no-df min-ttl 15 max-mss 224) match in on lo0 proto tcp from any port = 81 to any scrub (no-df min-ttl 15 max-mss 224) match in on lo0 proto tcp from any to any port = www scrub (max-mss 224) match in on lo0 proto tcp from any port = www to any scrub (no-df min-ttl 15 max-mss 224) match in on lo0 proto tcp from any port = www to any scrub (no-df min-ttl 15 max-mss 224) match in on lo0 proto tcp from any to any port = www scrub (no-df min-ttl 15 max-mss 224) match in on lo0 proto tcp from any to any port = 81 scrub (no-df min-ttl 15 max-mss 224) match in on lo0 proto tcp from any to any port = 82 scrub (no-df min-ttl 15 max-mss 224) match in on lo0 proto tcp from any port = www to any port = www scrub (no-df) match in on lo0 proto tcp from any port = www to any port = www scrub (no-df min-ttl 15 max-mss 224) match in on lo0 proto tcp from any port = www to any port = 81 scrub (no-df min-ttl 15 max-mss 224) match in on lo0 proto tcp from any port = 81 to any port = www scrub (no-df min-ttl 15 max-mss 224) match in on lo0 proto tcp from any port = 81 to any port = 81 scrub (no-df min-ttl 15 max-mss 224) match in on lo0 proto tcp from any to any port = 83 scrub (no-df min-ttl 15 max-mss 224) match in on lo0 inet proto tcp from (lo0) port = www to any match on lo0 proto tcp from any to any port = www scrub (max-mss 224) match out proto tcp from any to ! port = www match out proto tcp from any to port = www match out log on lo1000000 inet proto tcp from any to 10.0.0.1 port = www scrub (no-df max-mss 224)