ext_if="fxp0"
dmz_if="rl1" # RL1 not r11
int_if="rl0"
ext_ip_58="xxx.xxx.xxx.58"
ext_ip_59="xxx.xxx.xxx.59"
ext_ip_60="xxx.xxx.xxx.60"
ext_ip_61="xxx.xxx.xxx.61"
ext_ip_62="xxx.xxx.xxx.62"
ext_ip_230="xxx.xxx.xxx.230"
a_server_int="10.2.0.10"
jeff_int="10.2.0.11"
uncle_frank_int="10.2.0.12"
#jeff_ports="{ 22, 80, 443, 5900 }"
#uncle_frank_ports="{ 22, 80, 443, 5900 }"
#table <spamd> persist
#table <spamd-white> persist
#set skip on { lo $int_if }
scrub in
nat-anchor "ftp-proxy/*"
rdr-anchor "ftp-proxy/*"
rdr pass on $int_if proto tcp from any to any port 21 -> 127.0.0.1 port 8021
nat on $ext_if from !($ext_if) -> ($ext_if:0)
binat pass on $ext_if from $jeff_int to any -> $ext_ip_59
binat pass on $ext_if from $uncle_frank_int to any -> $ext_ip_60
binat pass on $ext_if from $a_server_int to any -> $ext_ip_230
#rdr pass on $int_if proto tcp from any to any port 21 -> 127.0.0.1 port 8021
anchor "ftp-proxy/*"
block in
pass out keep state
pass quick on { lo $int_if $dmz_if }
pass out log proto tcp from proxy to any port 21 keep state
# - Allow Ping
pass in quick on $ext_if proto icmp
pass out quick on $ext_if proto icmp
pass in quick on $dmz_if proto icmp
pass in quick on $int_if proto icmp
pass in on $ext_if proto tcp to ($ext_if) port ssh keep state
pass in log on $ext_if proto tcp to ($ext_if) port > 49151 user proxy keep state