1extern = "{ ! 10.0.0.0/8, 10.1.2.3 }" 2block drop out log on tun1000001 inet from ! 10.0.0.0/8 to any 3block drop out log on tun1000001 inet from 10.1.2.3 to any 4