1pass from route "foo" to any flags S/SA keep state 2pass from any to route "bar" flags S/SA keep state 3