# sed '/^#/ d; /^$/ d' /etc/pf.conf
int_if = "rl1"
ext_if = "rl0"
dmz_if = "re0"
table <martians> const { 127.0.0.0/8, 192.168.0.0/16, 172.16.0.0/12, 10.0.0.0/8 }
set block-policy return
set skip on lo0
scrub in all
nat inet from $int_if:network to ! $int_if:network -> ($ext_if)
rdr on $ext_if proto tcp from any to any port 2222 -> 192.168.2.32
nat inet from $dmz_if:network to ! $dmz_if:network -> ($ext_if)
block all
block in quick on $ext_if inet from <martians> ##check this line out
pass in quick proto tcp to port { 22, 2222 } keep state
pass inet proto icmp all icmp-type echoreq keep state
pass inet proto { tcp, udp } from any to any port { domain, bootps, bootpc } keep state