1# dynamic interface expansion has limitations; and NAT stuff must be af uniq 2 3match in on lo0 from any to any rdr-to (lo0) 4match out on lo0 from (lo0) to any nat-to (lo0) 5match in on lo0 inet6 from 10.0.0.1 rdr-to (lo0) 6 7