ext_if="ndis0" int_if="ed0" internal_net="192.168.0.0/24" external_addr="193.188.192.15" scrub in all # Queueing: altq on $ext_if bandwidth 192Kb priq queue { internets, webserver } queue internets priq(default) queue webserver priority 0 priq # NAT: nat on $ext_if from $int_if:network to any -> ($ext_if) rdr pass on $ext_if proto tcp from any to any port 8080 -> 192.168.0.2 port 8080 rdr pass on $ext_if proto tcp from any to any port 51986 -> 192.168.0.2 port 51986 pass quick on {lo0, $int_if} block in log all antispoof quick for $int_if inet pass in on $ext_if proto tcp from any to ($ext_if) port 80 keep state queue webserv er pass out on $ext_if proto tcp all modulate state flags S/SA pass out on $ext_if proto { udp, icmp } all keep state