ext_if="ndis0" int_if="ed0" internal_net="192.168.0.0/24" external_addr="193.188.192.15" #table { 10.0.0.0/8, !10.1.0.0/16, 192.168.0.0/24, 192.168.1.18 } #set skip on lo0 scrub in all # Queueing: altq on $ext_if bandwidth 192Kb priq queue { internets, webserver } queue internets priq(default) queue webserver priority 0 priq nat on $ext_if from $int_if:network to any -> ($ext_if) rdr pass on $ext_if proto tcp from any to any port 8080 -> 192.168.0.2 port 8080 rdr pass on $ext_if proto tcp from any to any port 51986 -> 192.168.0.2 pass quick on lo0 block in log all antispoof quick for $int_if inet pass in on $ext_if proto tcp from any to ($ext_if) port 80 keep state queue webserv er #pass out on $ext_if proto { tcp, udp } all keep state pass out on $ext_if proto tcp all modulate state flags S/SA pass out on $ext_if proto { udp, icmp } all keep state pass in on $int_if all