nat on lo0 inet all -> 127.0.0.1 pass in on lo1000000 all flags S/SA keep state