ext_if="fxp0"   # replace with actual external interface name i.e., dc0
int_if="fxp1"   # replace with actual internal interface name i.e., dc1
internal_net="10.11.12.0/24"
external_addr="192.168.1.17"
scrub in all
rdr on carp1 proto tcp from any to 192.168.1.13/32 port 80 -> 10.11.12.13 port 80
pass in all
pass out all
pass  in  on $ext_if proto tcp from any to $ext_if port 22 keep state
pass  out on $ext_if proto { tcp, udp } all keep state