1 2 3 4 5
# ports are invalid for proto icmp rdr on lo0 proto icmp from any to 11.1.1.1/32 port 12345 -> 172.17.0.2 port 69 # flags on non-tcp rules are invalid pass in all flags S/SA