ext_if="fxp0"
dmz_if="rl1"    # RL1 not r11
int_if="rl0"

ext_ip_58="xxx.xxx.xxx.58"
ext_ip_59="xxx.xxx.xxx.59"
ext_ip_60="xxx.xxx.xxx.60"
ext_ip_61="xxx.xxx.xxx.61"
ext_ip_62="xxx.xxx.xxx.62"
ext_ip_230="xxx.xxx.xxx.230"
a_server_int="10.2.0.10"
jeff_int="10.2.0.11"
uncle_frank_int="10.2.0.12"

#jeff_ports="{ 22, 80, 443, 5900 }"
#uncle_frank_ports="{ 22, 80, 443, 5900 }"

#table <spamd> persist
#table <spamd-white> persist

#set skip on { lo $int_if }

scrub in

nat-anchor "ftp-proxy/*"
rdr-anchor "ftp-proxy/*"
rdr pass on $int_if proto tcp from any to any port 21 -> 127.0.0.1 port 8021

nat on $ext_if from !($ext_if) -> ($ext_if:0)

binat pass on $ext_if from $jeff_int to any -> $ext_ip_59
binat pass on $ext_if from $uncle_frank_int to any -> $ext_ip_60
binat pass on $ext_if from $a_server_int to any -> $ext_ip_230

#rdr pass on $int_if proto tcp from any to any port 21 -> 127.0.0.1 port 8021

anchor "ftp-proxy/*"
block in
pass out keep state

pass quick on { lo $int_if $dmz_if }

pass out log proto tcp from proxy to any port 21 keep state

# - Allow Ping
pass in quick on $ext_if proto icmp
pass out quick on $ext_if proto icmp
pass in quick on $dmz_if proto icmp

pass in quick on $int_if proto icmp
pass in on $ext_if proto tcp to ($ext_if) port ssh keep state
pass in log on $ext_if proto tcp to ($ext_if) port > 49151 user proxy keep state