lo0: flags=8049<UP,LOOPBACK,RUNNING,MULTICAST> mtu 33224
	groups: lo
	inet 127.0.0.1 netmask 0xff000000
rl0: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> mtu 1500
	lladdr 00:02:44:66:50:df
	description: switch
	media: Ethernet autoselect (100baseTX full-duplex)
	status: active
	inet 192.168.0.1 netmask 0xfffffff8 broadcast 192.168.0.7
	inet 192.168.0.253 netmask 0xfffffffc broadcast 192.168.0.255
	inet 10.83.253.1 netmask 0xffffffe0 broadcast 10.83.253.31
pflog0: flags=0<> mtu 33224
pppoe0: flags=8851<UP,POINTOPOINT,RUNNING,SIMPLEX,MULTICAST> mtu 1454
	dev: rl0 state: session
	sid: 0x19df PADI retries: 1 PADR retries: 0 time: 00:52:25
	sppp: phase network authproto pap authname "adsluser" 
	groups: pppoe egress
	inet 89.210.6.60 --> 0.0.0.1 netmask 0xffffffff

# MACROS
IF_INT = "rl0"
#IP_INT = "192.168.0.1"
IF_ADSL = "pppoe0"
IP_ALIAS_MODEM = "192.168.0.253"
IP_MODEM = "192.168.0.254"
IP_DESKTOP = "192.168.0.2"
IP_LAPTOP = "192.168.0.3"
ACL_ADMIN = "{" $IP_DESKTOP "}"
ACL_INET = "{" $IP_DESKTOP $IP_LAPTOP "}"

# TABLES

# GLOBAL OPTIONS

# TRAFFIC NORMALIZATION
scrub out on $IF_ADSL max-mss 1454

# QUEUEING RULES

# TRANSLATION RULES (NAT)
nat on $IF_INT from $ACL_ADMIN to $IP_MODEM -> $IP_ALIAS_MODEM
nat on $IF_INT from $ACL_INET to any -> ($IF_ADSL)

# FILTER RULES
pass in log all keep state
pass out log all keep state