nat on $ext_if from $int_if:network to any -> ($ext_if) rdr on $ext_if proto tcp from any to any port 3389 -> 10.0.1.24 rdr on $ext_if proto udp from any to any port 3389 -> 10.0.1.24 pass in on $ext_if proto tcp from any to 10.0.1.24 port 3389 pass in on $ext_if proto udp from any to 10.0.1.24 port 3389 pass in all pass out all