1pass in proto tcp from { 1.2.3.4, 1.2.3.5 } to any label \ 2"$nr:$if:$proto:$srcaddr:$srcport:$dstaddr:$dstport" 3pass in on lo0 proto tcp from { 1.2.3.4, 1.2.3.5 } to any label \ 4"$nr:$if:$proto:$srcaddr:$srcport:$dstaddr:$dstport" 5