1nat-anchor "foo" all 2nat-anchor "foo" all 3nat-anchor "foo" all 4nat-anchor "foo" inet proto tcp from 10.0.0.0/8 to ! 1.2.3.4 5nat-anchor "foo" inet proto udp from 10.1.2.3 port = 2000 to 10.3.4.5 port < 1000 6nat-anchor "foo" inet proto udp from 10.1.2.3 port = 2000 to 10.3.4.5 port > 1100 7nat-anchor "foo" inet proto udp from 10.1.2.3 port = 2000 to 10.4.5.6 port < 1000 8nat-anchor "foo" inet proto udp from 10.1.2.3 port = 2000 to 10.4.5.6 port > 1100 9nat-anchor "foo" inet proto udp from 10.1.2.3 port < 2100 to 10.3.4.5 port < 1000 10nat-anchor "foo" inet proto udp from 10.1.2.3 port < 2100 to 10.3.4.5 port > 1100 11nat-anchor "foo" inet proto udp from 10.1.2.3 port < 2100 to 10.4.5.6 port < 1000 12nat-anchor "foo" inet proto udp from 10.1.2.3 port < 2100 to 10.4.5.6 port > 1100 13nat-anchor "foo" inet proto udp from 10.2.3.4 port = 2000 to 10.3.4.5 port < 1000 14nat-anchor "foo" inet proto udp from 10.2.3.4 port = 2000 to 10.3.4.5 port > 1100 15nat-anchor "foo" inet proto udp from 10.2.3.4 port = 2000 to 10.4.5.6 port < 1000 16nat-anchor "foo" inet proto udp from 10.2.3.4 port = 2000 to 10.4.5.6 port > 1100 17nat-anchor "foo" inet proto udp from 10.2.3.4 port < 2100 to 10.3.4.5 port < 1000 18nat-anchor "foo" inet proto udp from 10.2.3.4 port < 2100 to 10.3.4.5 port > 1100 19nat-anchor "foo" inet proto udp from 10.2.3.4 port < 2100 to 10.4.5.6 port < 1000 20nat-anchor "foo" inet proto udp from 10.2.3.4 port < 2100 to 10.4.5.6 port > 1100 21nat-anchor "foo" inet proto tcp from 10.1.2.3 port = 2000 to 10.3.4.5 port < 1000 22nat-anchor "foo" inet proto tcp from 10.1.2.3 port = 2000 to 10.3.4.5 port > 1100 23nat-anchor "foo" inet proto tcp from 10.1.2.3 port = 2000 to 10.4.5.6 port < 1000 24nat-anchor "foo" inet proto tcp from 10.1.2.3 port = 2000 to 10.4.5.6 port > 1100 25nat-anchor "foo" inet proto tcp from 10.1.2.3 port < 2100 to 10.3.4.5 port < 1000 26nat-anchor "foo" inet proto tcp from 10.1.2.3 port < 2100 to 10.3.4.5 port > 1100 27nat-anchor "foo" inet proto tcp from 10.1.2.3 port < 2100 to 10.4.5.6 port < 1000 28nat-anchor "foo" inet proto tcp from 10.1.2.3 port < 2100 to 10.4.5.6 port > 1100 29nat-anchor "foo" inet proto tcp from 10.2.3.4 port = 2000 to 10.3.4.5 port < 1000 30nat-anchor "foo" inet proto tcp from 10.2.3.4 port = 2000 to 10.3.4.5 port > 1100 31nat-anchor "foo" inet proto tcp from 10.2.3.4 port = 2000 to 10.4.5.6 port < 1000 32nat-anchor "foo" inet proto tcp from 10.2.3.4 port = 2000 to 10.4.5.6 port > 1100 33nat-anchor "foo" inet proto tcp from 10.2.3.4 port < 2100 to 10.3.4.5 port < 1000 34nat-anchor "foo" inet proto tcp from 10.2.3.4 port < 2100 to 10.3.4.5 port > 1100 35nat-anchor "foo" inet proto tcp from 10.2.3.4 port < 2100 to 10.4.5.6 port < 1000 36nat-anchor "foo" inet proto tcp from 10.2.3.4 port < 2100 to 10.4.5.6 port > 1100 37rdr-anchor "bar" all 38rdr-anchor "bar" all 39rdr-anchor "bar" all 40rdr-anchor "bar" inet proto tcp from 10.0.0.0/8 to ! 1.2.3.4 41rdr-anchor "bar" inet proto udp from any to 10.1.2.0/24 port = 25 42rdr-anchor "bar" inet proto tcp from any to 10.1.2.0/24 port = smtp 43binat-anchor "baz" all 44binat-anchor "baz" all 45binat-anchor "baz" all 46binat-anchor "baz" inet proto tcp all 47anchor "foo" all 48anchor "bar" all 49anchor "bar" all 50anchor "foo" inet all 51anchor "foo" inet6 all 52anchor "foo" inet all 53anchor "foo" proto tcp all 54anchor "foo" inet proto tcp from 10.1.2.3 port = smtp to 10.2.3.4 port = ssh 55anchor "foobar" inet6 proto udp from ::1 port = 1 to ::1 port = 2 56anchor "filteropt" out proto tcp from any to any port = ssh user = 0 57anchor "filteropt" in proto tcp from any to (self) port = ssh group = 27 58anchor "filteropt" out inet proto icmp all icmp-type echoreq 59