ext_if="hme0" # replace with actual external interface name i.e., dc0 tun_if="tun0" int_if="rl0" # replace with actual internal interface name i.e., dc1 nat_net="192.168.1.0/28" yashy_com="206.248.137.44" anon_gw="206.248.137.44" lanports="{ 22, 25, 53, 80, 110, 993 }" msports="{ 139, 445 }" desktop="192.168.3.2" protos = "{tcp, udp, icmp}" table { 206.248.154.22, 65.39.192.130 } table { 204.187.154.25, 204.187.154.26 } scrub in all nat on $tun_if from $nat_net to any -> $anon_gw #nat on $tun_if from $int_if:network to any -> ($tun_if) #nat on $ext_if from $nat_net to any -> 206.248.137.44 #nat on $tun_if from $nat_net to any -> ($tun_if) pass in all pass out all