12:00 ext="xl0" 12:00 int="rl0" 12:00 tcp_services="{ 22, 113, 80 }" 12:00 icmp_types="echoreq" 12:01 comp2="192.113.113.11" 12:01 set block-policy return 12:01 set loginterface $ext 12:01 set skip on lo 12:01 scrub in 12:01 nat on $ext from $int to any -> ($ext) 12:01 rdr on $ext proto tcp from any to any port 80 -> $comp2 12:01 block in 12:01 pass out keep state 12:01 antispoof quick for { lo $int } 12:01 pass in on $ext inet proto tcp from any to ($ext) port $tcp_services flags S/SA keep state 12:01 pass in on $ext inet proto tcp from any to $comp2 port 80 \ flags S/SA synproxy state 12:01 pass in inet proto icmp all icmp-type $icmp_types keep state 12:01 pass in quick on $int