1 100 pass in all 2 200 pass in proto tcp all 3 110 pass in proto udp all 4 110 pass in from localhost to any 5 pass in all 6 pass in from localhost to any 7 @0 100 pass in from localhost to any 8 @1 pass in from any to localhost 9 @0 pass in from 1.1.1.1 to any 10 @1 110 pass in from 2.2.2.2 to any 11 @2 pass in from 3.3.3.3 to any 12 call srcgrpmap/100 out from 10.1.0.0/16 to any 13 call now dstgrpmap/200 in from 10.2.0.0/16 to any 14