#set our macros
ext_if="rl0"
int_if="re0"
internal_net="192.168.0.0/24"

scrub in all

nat on $ext_if from $internal_net to any -> ($ext_if)

rdr on $int_if proto tcp from any to any port ftp -> 127.0.0.1 port 8021

#block in log all

pass in on $int_if inet from $internal_net to any modulate state






pass in on $ext_if inet proto tcp from any to ($ext_if) port ssh keep state

pass in on $ext_if inet proto tcp from any to ($ext_if) user proxy keep state