1no nat on lo0 from 10.0.1.0/24 tag regress 2 nat on lo0 from 10.0.0.0/8 -> lo0 3block out on lo0 tagged regress 4 5