rdr on $ext_if proto udp from any to any port 500 -> $bonito port 500
rdr on $ext_if proto udp from any to any port 4500 -> $bonito port 4500
rdr on $ext_if proto esp from any to any -> $bonito
rdr on $ext_if proto ah from any to any -> $bonito