# we have to bail out on host() errors match out on lo0 from any to 10/8 nat-to 10.0.0.0.1