1match out on lo0 inet all tag regress nat-to lo0 2pass out quick on lo0 keep state tagged regress 3 4