1# pfctl -o rule reordering 2 3pass in on lo1000000 proto tcp from any to 10.0.0.2 port 22 keep state 4pass in on lo1000001 proto tcp from 10.0.0.1 port 22 to 10.0.0.2 keep state 5pass in on lo1000001 proto udp from 10.0.0.5 to 10.0.0.4 port 53 keep state 6pass in on lo1000000 proto udp from any to 10.0.0.2 port 53 keep state 7pass in proto tcp to 10.0.0.1 port 80 keep state 8pass out on lo1000001 proto udp from any to 10.0.0.2 port 53 keep state 9pass in proto tcp to 10.0.0.3 port 80 keep state 10pass out proto tcp to 10.0.0.1 port 81 keep state 11pass in proto udp to 10.0.0.3 port 53 keep state 12pass in on lo1000001 proto udp from 10.0.0.2 port 53 to 10.0.0.2 keep state 13pass out proto udp to 10.0.0.1 port 53 keep state 14pass out on lo1000000 proto udp from any to 10.0.0.2 port 53 keep state 15pass out proto udp to 10.0.0.3 port 53 keep state 16pass out on lo1000000 proto tcp from any to 10.0.0.2 port 22 keep state 17pass in on lo1000001 proto tcp from any to 10.0.0.2 port 22 keep state 18pass in on lo1000001 proto udp from any to 10.0.0.2 port 53 keep state 19pass in on lo1000001 proto tcp from 10.0.0.1 to 10.0.0.4 keep state 20pass out on lo1000001 proto tcp from any to 10.0.0.2 port 22 keep state 21pass out proto tcp to 10.0.0.1 port 80 keep state 22pass in proto udp to 10.0.0.1 port 53 keep state 23pass in on lo1000001 proto tcp from 10.0.0.1 to 10.0.0.6 port 22 keep state 24pass in on lo1000001 proto udp from 10.0.0.5 to 10.0.0.2 keep state 25