nat on en0 proto {tcp, udp, icmp} from 10.20.0.0/24 to any -> (en0)
pass from {lo0, 10.20.0.0/24} to any keep state