cogent_net      = "66.250.69.0/23"                                                                                                                              
limelight_net   = "69.28.157.0/24"                                                                                                                              
                                                                                                                                                                
int_if          = "bge0"                                                                                                                                        
cogent_if       = "fxp0"                                                                                                                                        
limelight_if    = "fxp1"                                                                                                                                        
cogent_gw       = "66.250.4.149"                                                                                                                                
limelight_gw    = "69.28.156.193"                                                                                                                               
                                                                                                                                                                
set limit { states 50000, frags 25000, src-nodes 50000 }                                                                                                        
set timeout tcp.established 3600                                                                                                                                
                                                                                                                                                                
table <spammers> persist file "/etc/spammers"                                                                                                                   
                                                                                                                                                                
pass in quick on $int_if from $cogent_net to $limelight_net                                                                                                     
pass in quick on $int_if from $limelight_net to $cogent_net                                                                                                     
                                                                                                                                                                
pass in quick on $cogent_if proto tcp from any to $cogent_net flags S/SA                                                                                        
pass in quick on $limelight_if proto tcp from any to $limelight_net flags S/SA                                                                                  
                                                                                                                                                                
pass in on $cogent_if from any to $cogent_net                                                                                                                   
pass in on $limelight_if from any to $limelight_net                                                                                                             
                                                                                                                                                                
pass in on $int_if route-to ($cogent_if $cogent_gw) from $cogent_net to any                                                                                     
pass in on $int_if route-to ($limelight_if $limelight_gw) from $limelight_net to any                                                                            
                                                                                                                                                                
block in quick on $cogent_if proto tcp from any to any port = 111                                                                                               
block in quick on $limelight_if proto tcp from any to any port = 111                                                                                            
                                                                                                                                                                
block in quick on $cogent_if proto tcp from <spammers> to any port = 25                                                                                         
block in quick on $limelight_if proto tcp from <spammers> to any port = 25