# net.inet.ip.forwarding=1 in /etc/sysctl.conf
cogent_net = "66.250.69.0/23"
limelight_net = "69.28.157.0/24"
int_if = "em0"
# ip address 69.28.157.1 255.255.255.0 secondary
# ip address 66.250.69.254 255.255.254.0
cogent_if = "em1"
# ip address 66.250.4.150 255.255.255.252
limelight_if = "em2"
# ip address 69.28.156.194 255.255.255.252
cogent_gw = "66.250.4.149"
limelight_gw = "69.28.156.193"
pass in quick on $int_if proto tcp from $cogent_net to $limelight_net keep state flags s/sa
pass in quick on $int_if proto tcp from $limelight_net to $cogent_net keep state flags s/sa
pass in quick on $int_if from $cogent_net to $limelight_net
pass in quick on $int_if from $limelight_net to $cogent_net
pass out on $int_if proto tcp from any to $cogent_net keep state flags s/sa
pass out on $int_if proto tcp from any to $limelight_net keep state flags s/sa
pass out on $int_if from any to $cogent_net
pass out on $int_if from any to $limelight_net
pass in on $int_if route-to ($cogent_if $cogent_gw) from $cogent_net to any keep state
pass in on $int_if route-to ($limelight_if $limelight_gw) from $limelight_net to any keep state