1pass all flags S/SA set ( prio 3 ) keep state 2pass out on lo1000000 proto tcp from any to any port = ssh flags S/SA set ( prio(5, 2) ) keep state 3pass inet proto udp from any to 127.0.0.1 port = domain set ( prio 4 ) keep state 4pass inet proto udp from any to 127.0.0.2 port = domain set ( prio 4 ) keep state 5