7 anchor "foo" proto tcp all
8 anchor "foo" inet proto tcp from 10.1.2.3 port = smtp to 10.2.3.4 port = ssh
9 anchor "foobar" inet6 proto udp from ::1 port = tcpmux to ::1 port = compressnet
10 anchor "filteropt" out proto tcp from any to any port = ssh user = 0
11 anchor "filteropt" in proto tcp from any to (self) port = ssh group = 22
12 anchor "filteropt" out inet proto icmp all icmp-type echoreq