WAN_IF = "fxp0" LAN_IF = "rl0" WIP_MYIP = "192.168.0.155" LIP_MYIP = "10.0.0.155" WIP_IBM = "192.168.0.50" LIP_IBM = "10.0.0.50" scrub in all rdr pass on $WAN_IF proto tcp from any to $WIP_IBM -> $LIP_IBM nat on $WAN_IF from $LIP_IBM to any -> $WIP_IBM block in log all pass out all pass in on $WAN_IF proto tcp from any to $WIP_MYIP port 22 flags S/SA keep state pass in on $WAN_IF proto tcp from any to $LIP_IBM port 80 flags S/SA keep state (if-bound)