skip steps pass in on em0 from 1.2.3.4 pass in on em0 proto tcp to 9.8.7.6 port 80 pass in on em0 proto tcp to 9.8.7.1 port 25 pass in on em0 to 5.6.7.8 rdr-to 9.8.7.6 pass in on em1 rule 0 not matching because of interface? then 1, 2, 3 cannot match, either 4 is the next possible match