# egrep -i "nat|rdr" /tmp/rules.debug nat-anchor "pftpx/*" nat-anchor "natearly/*" nat-anchor "natrules/*" rdr-anchor "pftpx/*" # Outbound NAT rules nat on $wan from 192.168.1.0/24 port 500 to any port 500 -> (xl1) port 500 nat on $wan from 192.168.1.0/24 port 5060 to any port 5060 -> (xl1) port 5060 nat on $wan from 192.168.1.0/24 to any -> (xl1) rdr-anchor "slb" # NAT Inbound Redirects rdr on xl1 proto { tcp udp } from any to 66.188.124.186 port { 5160 } -> 192.168.1.200 rdr on xl1 proto { tcp udp } from any to 66.188.124.186 port 10000:20000 -> 192.168.1.200 port 10000:* rdr on xl1 proto tcp from any to 66.188.124.186 port { 3389 } -> 192.168.1.32 rdr on xl1 proto tcp from any to 66.188.124.186 port { 6122 } -> 192.168.1.220 rdr on xl1 proto tcp from any to 66.188.124.186 port { 22 } -> 192.168.1.50 # IMSpector rdr anchor rdr-anchor "imspector" # UPnPd rdr anchor rdr-anchor "miniupnpd" # NAT Reflection rules pass in quick on $wan proto { tcp udp } from any to { 192.168.1.200 } port = 5160 keep state queue (qwandef, qwanacks) label "USER_RULE: NAT " pass in quick on $wan proto { tcp udp } from any to { 192.168.1.200 } port 9999 >< 20001 keep state queue (qwandef, qwanacks) label "USER_RULE: NAT Mike's Linksys/Vonage Router" pass in quick on $wan proto tcp from any to { 192.168.1.32 } port = 3389 keep state queue (qwandef, qwanacks) label "USER_RULE: NAT " pass in quick on $wan proto tcp from any to { 192.168.1.220 } port = 6122 keep state queue (qwandef, qwanacks) label "USER_RULE: NAT Smokey's FreeBSD VM" pass in quick on $wan proto tcp from any to { 192.168.1.50 } port = 22 keep state queue (qwandef, qwanacks) label "USER_RULE: NAT SSH to Blackbox" #