1 2 3 4
# wireguard pass in on egress inet proto udp from any to any port 50000 pass out quick on egress inet from (tun0:network) nat-to (egress:0)