# mandd fbsd pf-ruleset, Sep 26,2006
#PF: Runtime flags
set block-policy drop
set debug loud
#set fingerprints ostrace
#os fingerprinting

ext_if = 'tun0'         # external
int_if = 'dc0'         # internal

#internal_net = '192.168.0.0/24'
#nat on $ext_if from $internal_net to any -> ($ext_if)
# nat/rdr
#nat pass on $ext_if inet from any -> $int_if
#nat on tun0 from dc0:network to any -> tun0

rdr pass on $ext_if proto tcp to port 47019 -> 192.168.0.69 port 47019
rdr pass on $ext_if proto tcp to port 47020 -> 192.168.0.69 port 47020
rdr pass on $ext_if proto tcp to port 47021 -> 192.168.0.69 port 47021
rdr pass on $ext_if proto tcp to port 47022 -> 192.168.0.69 port 47022
rdr pass on $ext_if proto tcp to port 47023 -> 192.168.0.69 port 47023
nat on $ext_if from !($ext_if) -> ($ext_if:0)

pass in log all
pass out log all