All pastes #22215 Raw Edit

Unnamed

public text v1 · immutable
#22215 ·published 2005-09-06 04:22 UTC
rendered paste body
      # Your inet interface
      ext = de0
      int = de1

      # SIP (TCP)
      voip_tcp = "5060:5063"
      # SIP, IAX2, IAX, RTP, MGCP (UDP)
      voip_udp = "{5060:5063, 10000:20000}"

      nat on $ext from $int:network to any -> ($ext)
      rdr on $ext proto tcp from any to any port 22 -> 172.16.0.3
      rdr on $ext proto tcp from any to 69.194.84.116 port $voip_tcp -> 172.16.0.3
      rdr on $ext proto udp from any to 69.194.84.116 port $voip_udp -> 172.16.0.3
      
      pass in quick on $ext proto tcp from any to 172.16.0.3 port $voip_tcp keep state
      pass in quick on $ext proto udp from any to 172.16.0.3 port $voip_udp keep state
      pass in on $ext proto tcp from any to 172.16.0.3 port 22 flags S/SA synproxy state
      pass out on $ext inet proto tcp all flags S/SA keep state
      pass out on $ext proto udp all keep state