WAN_IF = "fxp0" LAN_IF = "rl0" WIP_MYIP = "192.168.0.155" LIP_MYIP = "10.0.0.155" WIP_IBM = "192.168.0.50" LIP_IBM = "10.0.0.50" scrub in all rdr on $WAN_IF proto tcp from any to $WIP_IBM port 80 -> $LIP_IBM port 80 nat on $WAN_IF from $LIP_IBM to any -> $WIP_IBM block in all # if I set this to pass, I can access the http server on LIP_IBM, but in block no, why ? (filter rule below) pass out all pass in on $WAN_IF proto tcp from any to $WIP_MYIP port 22 flags S/SA keep state pass in on $WAN_IF proto tcp from any to $LIP_IBM port 80 flags S/SA keep state # this rule are not working, why ?