1 2 3 4 5 6 7
# Test rule order processing: should fail unless nat -> filter set require-order yes match in on lo0 all pass in on lo1000000 all # bork nat on lo0 all -> lo0