#match out on lo0 from 10.0.0.0/8 to any nat-to lo0
block out on lo0 tagged regress