1rdr on em0 proto tcp from any to any -> 1.1.1.1 port 2121 2pass out log quick on lo0 route-to lo0 from any to any 3pass in log quick on lo0 route-to (lo0 localhost) from any to any 4