localnet = "{ fxp1, em0 }" service = "proto udp" nat on fxp0 inet from !(fxp0) to any -> (fxp0:0) block all # # Deliver DHCP server response from the ISP. # pass in quick on fxp0 $service from any port boot ps \ to any port bootpc keep state pass out quick on $localnet $service from any port \ bootps to port bootpc # # Deliver DHCP client request to my ISP # pass in quick on $localnet $service from 0.0.0.0 port bootpc \ to 255.255.255.255 port bootps keep state pass out quick on fxp0 $service form $localnet port bootpc \ to 255.255.255.255 port bootps