xref: /openbsd/regress/sbin/pfctl/pf84.optimized (revision 404b540a) 
1@0 match out on tun1000000 inet from 10.0.0.0/24 to any nat-to { 10.0.1.1, 10.0.1.2 } round-robin sticky-address
2  [ Skip steps: i=3 f=3 p=3 sp=end dp=3 ]
3  [ queue: qname= qid=0 pqname= pqid=0 ]
4  [ Evaluations: 0         Packets: 0         Bytes: 0           States: 0     ]
5@1 match in on tun1000000 inet from any to 10.0.1.1 rdr-to 10.0.0.0/24 random sticky-address
6  [ Skip steps: i=3 d=end f=3 p=3 sa=end sp=end dp=3 ]
7  [ queue: qname= qid=0 pqname= pqid=0 ]
8  [ Evaluations: 0         Packets: 0         Bytes: 0           States: 0     ]
9@2 match in on tun1000000 inet from any to 10.0.1.2 rdr-to { 10.0.0.1, 10.0.0.2 } round-robin sticky-address
10  [ Skip steps: d=end sa=end sp=end ]
11  [ queue: qname= qid=0 pqname= pqid=0 ]
12  [ Evaluations: 0         Packets: 0         Bytes: 0           States: 0     ]
13@3 pass in proto tcp from any to any port = ssh flags S/SA keep state (source-track global)
14  [ Skip steps: i=end d=end f=end p=end sa=end sp=end da=end ]
15  [ queue: qname= qid=0 pqname= pqid=0 ]
16  [ Evaluations: 0         Packets: 0         Bytes: 0           States: 0     ]
17@4 pass in proto tcp from any to any port = smtp flags S/SA keep state (source-track global)
18  [ Skip steps: i=end d=end f=end p=end sa=end sp=end da=end ]
19  [ queue: qname= qid=0 pqname= pqid=0 ]
20  [ Evaluations: 0         Packets: 0         Bytes: 0           States: 0     ]
21@5 pass in proto tcp from any to any port = www flags S/SA keep state (source-track rule, max-src-states 3, max-src-nodes 1000)
22  [ Skip steps: i=end d=end f=end p=end sa=end sp=end da=end ]
23  [ queue: qname= qid=0 pqname= pqid=0 ]
24  [ Evaluations: 0         Packets: 0         Bytes: 0           States: 0     ]
25@6 pass in proto tcp from any to any port = ntp flags S/SA keep state (source-track rule, max-src-nodes 1000)
26  [ Skip steps: i=end d=end f=end p=end sa=end sp=end da=end ]
27  [ queue: qname= qid=0 pqname= pqid=0 ]
28  [ Evaluations: 0         Packets: 0         Bytes: 0           States: 0     ]
29@7 pass in proto tcp from any to any port = 321 flags S/SA keep state (source-track global, max-src-states 3)
30  [ Skip steps: i=end d=end f=end p=end sa=end sp=end da=end dp=end ]
31  [ queue: qname= qid=0 pqname= pqid=0 ]
32  [ Evaluations: 0         Packets: 0         Bytes: 0           States: 0     ]
33