ext_if="nfe0"   # replace with actual external interface name i.e., dc0
int_if="nfe1"   # replace with actual internal interface name i.e., dc1

nat on $ext_if from $int_if:network to any -> ($ext_if)
rdr on $ext_if proto tcp from any to any port 3389 -> 10.0.1.24
rdr on $ext_if proto udp from any to any port 3389 -> 10.0.1.24
pass in on $ext_if proto tcp from any to 10.0.1.24 port 3389
pass in on $ext_if proto udp from any to 10.0.1.24 port 3389

pass in all
pass out all