Fallgruber: in, out, on

Hvis du skriver

pass in on xl1 from xl1:network to xl0:network \
     port $ports keep state

trenger du også

pass out on xl0 from xl1:network to xl0:network \
     port $ports keep state

men du mener antakelig

pass from xl1:network to any port $ports keep state