1# pf on PF must have these rules in the regress anchor 2 3pass to { $PF_IN/24 $PF_IN6/64 } 4pass to { $RT_IN/24 $RT_IN6/64 } 5pass to { $ECO_IN/24 $ECO_IN6/64 } 6pass to { $ECO_OUT/24 $ECO_OUT6/64 } 7pass to { $RDR_IN/24 $RDR_IN6/64 } 8pass to { $RDR_OUT/24 $RDR_OUT6/64 } 9 10pass in to { $RDR_IN/24 $RDR_OUT/24 } rdr-to $ECO_IN 11pass out to { $ECO_OUT/24 $RDR_OUT/24 } nat-to $PF_OUT 12pass in to { $RDR_IN6/64 $RDR_OUT6/64 } rdr-to $ECO_IN6 13pass out to { $ECO_OUT6/64 $RDR_OUT6/64 } nat-to $PF_OUT6 14 15pass in to $AF_IN/24 af-to inet6 from $PF_OUT6 to $ECO_IN6/120 tag af 16pass out inet6 tagged af 17pass in to $AF_IN6/64 af-to inet from $PF_OUT to $ECO_IN/24 tag af 18pass out inet tagged af 19 20pass in to $RTT_IN/24 route-to $RT_IN tag rttin 21pass out tagged rttin 22pass in to $RTT_IN6/64 route-to $RT_IN6 tag rttin 23pass out tagged rttin 24 25pass in to $RTT_OUT/24 tag rttout 26pass out route-to $RT_IN tagged rttout 27pass in to $RTT_OUT6/64 tag rttout 28pass out route-to $RT_IN6 tagged rttout 29 30pass in from $RPT_IN/24 reply-to $SRC_OUT tag rptin 31pass out tagged rptin 32pass in from $RPT_IN6/64 reply-to $SRC_OUT6 tag rptin 33pass out tagged rptin 34 35pass in from $RPT_OUT/24 tag rptout 36pass out reply-to $SRC_OUT tagged rptout 37pass in from $RPT_OUT6/64 tag rptout 38pass out reply-to $SRC_OUT6 tagged rptout 39