ext_if=sis0 int_if=sis1 carpdevs="sis0 sis1" int_carp=carp1 ext_carp=carp0 match out on $ext_if from $int_if:network nat-to ($ext_carp)