1match in on lo0 proto tcp from 10.0.0.0/8 to port 80 rdr-to lo0 2block out on lo0 tagged regress 3 4