ext_if="rl0"

webserver_jail_ip="192.168.1.3"
webserver_jail_forward_ports="{ 80, 443 }"
ports_jail_ip="192.168.1.5"
users_jail_ip="192.168.1.4"
users_jail_forward_ports="{ 6225 }"

scrub in all

# outgoing connections
nat pass on $ext_if from $webserver_jail_ip to any -> ($ext_if:0)
nat pass on $ext_if from $ports_jail_ip to any -> ($ext_if:0)

rdr on $ext_if proto tcp from any to any port $webserver_jail_forward_ports -> $webserver_jail_ip
rdr on $ext_if proto tcp from any to any port $users_jail_forward_ports -> $users_jail_ip