path: root/regress/sbin/pfctl/pf8.ok

extern = { ! 10.0.0.0/8, 10.1.2.3  }
@1 block out log on rl0 from 10.1.2.3 to any 
@1 block out log on rl0 from ! 10.0.0.0/255.0.0.0 to any