#Interfaces
ext_if="nfe0"
int_if="nfe1"

#NAT
nat on $ext_if from $int_if:network to any -> ($ext_if)

#Redirection Rules
rdr on $ext_if inet proto tcp to port 3389 -> 10.0.1.24
rdr on $ext_if inet proto tcp to port 110 -> 10.0.1.3
rdr on $ext_if inet proto tcp to port 444 -> 10.0.1.3
rdr on $ext_if inet proto tcp to port 443 -> 10.0.1.35
#Passing rules, needed to allow rdr or any other:


block in  on $ext_if all
pass in on $ext_if proto tcp from any to 10.0.1.24 port 3389
pass in on $ext_if proto tcp from any to 10.0.1.3 port 110
pass in on $ext_if proto tcp from any to 10.0.1.3 port 444
pass in on $ext_if proto tcp from any to 10.0.1.35 port 443

pass  in  on $ext_if proto tcp from any to any port 27 keep state
pass  in  on $ext_if proto tcp from any to any port 80 keep state
pass  in  on $int_if proto tcp from any to any
pass  in  on $ext_if proto tcp from any to any port 25 keep state
pass  in  on $ext_if proto tcp from any to $int_if port 443 keep state
#pass  out on $int_if proto { tcp, udp } all keep state
pass out all