ext_if="rl1" # replace with actual external interface name i.e., dc0 int_if="rl0" # replace with actual internal interface name i.e., dc1 internal_net="192.168.3.0/25" internal_addr="192.168.3.4" lan_addr = "192.168.3.4" int_if = "rl0" ext_if1 = "rl1" ext_if2 = "rl2" ext_gw1 = "61.17.42.1" ext_gw2 = "202.88.239.81" asianet_addr = "202.88.239.84" vsnl_addr = "61.17.42.102" # System Aliases loopback = "{ lo0 }" lan = "{ rl0 }" asianet = "{ rl2 }" vsnl = "{ rl1 }" # Outbound NAT rules #nat on $vsnl from 192.168.3.0/25 to any -> (rl1) nat on $asianet from 192.168.3.0/25 to any -> (rl2) #nat on $vsnl tagged TRICK -> (rl1) #pass out quick on $vsnl from any to any # allow all pass in all pass out all #pass in log on $vsnl tagged TRICK keep state pass in log quick on $asianet tagged TRICK keep state #pass out log quick on $asianet route-to { ( rl1 61.17.42.1 ) , ( rl2 202.88.239.81 ) } round-robin to any keep state label "Load Balance rule" #pass in quick on $lan from 192.168.3.0/25 to 192.168.3.4 keep state label "USER_RULE: Default LAN -> beastie" #pass in quick on $lan route-to { ( rl1 61.17.42.1 ) , ( rl2 202.88.239.81 ) } round-robin from 192.168.3.0/25 to any keep state label "USER_RULE: Default LAN -> any" #pass out log quick on $vsnl from $asianet_addr to any tag TRICK keep state pass out log quick on $asianet from any to any tag TRICK keep state