# net.inet.ip.forwarding=1 in /etc/sysctl.conf

cogent_net 	= "66.250.69.0/23"
limelight_net 	= "69.28.157.0/24"

int_if  	= "em0"
# ip address 69.28.157.1 255.255.255.0 secondary
# ip address 66.250.69.254 255.255.254.0

cogent_if 	= "em1"
# ip address 66.250.4.150 255.255.255.252

limelight_if 	= "em2"
# ip address 69.28.156.194 255.255.255.252

cogent_gw 	= "66.250.4.149"
limelight_gw 	= "69.28.156.193"

pass in quick on $int_if proto tcp from $cogent_net to $limelight_net keep state flags s/sa
pass in quick on $int_if proto tcp from $limelight_net to $cogent_net keep state flags s/sa

pass in quick on $int_if from $cogent_net to $limelight_net 
pass in quick on $int_if from $limelight_net to $cogent_net 

pass out on $int_if proto tcp from any to $cogent_net keep state flags s/sa
pass out on $int_if proto tcp from any to $limelight_net keep state flags s/sa

pass out on $int_if from any to $cogent_net
pass out on $int_if from any to $limelight_net

pass in on $int_if route-to ($cogent_if $cogent_gw) from $cogent_net to any keep state
pass in on $int_if route-to ($limelight_if $limelight_gw) from $limelight_net to any keep state