nat on en0 from 10.8.0.0/24 to any -> (en0)
nat on utun0 from 10.8.0.0/24 to any -> (utun0)
#block in quick proto icmp from any to any
