rendered paste bodylo0: flags=8049<UP,LOOPBACK,RUNNING,MULTICAST> mtu 33224
groups: lo
inet 127.0.0.1 netmask 0xff000000
rl0: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> mtu 1500
lladdr 00:02:44:66:50:df
description: switch
media: Ethernet autoselect (100baseTX full-duplex)
status: active
inet 192.168.0.1 netmask 0xfffffff8 broadcast 192.168.0.7
inet 192.168.0.253 netmask 0xfffffffc broadcast 192.168.0.255
inet 10.83.253.1 netmask 0xffffffe0 broadcast 10.83.253.31
pflog0: flags=0<> mtu 33224
pppoe0: flags=8851<UP,POINTOPOINT,RUNNING,SIMPLEX,MULTICAST> mtu 1454
dev: rl0 state: session
sid: 0x19df PADI retries: 1 PADR retries: 0 time: 00:52:25
sppp: phase network authproto pap authname "adsluser"
groups: pppoe egress
inet 89.210.6.60 --> 0.0.0.1 netmask 0xffffffff
# MACROS
IF_INT = "rl0"
#IP_INT = "192.168.0.1"
IF_ADSL = "pppoe0"
IP_ALIAS_MODEM = "192.168.0.253"
IP_MODEM = "192.168.0.254"
IP_DESKTOP = "192.168.0.2"
IP_LAPTOP = "192.168.0.3"
ACL_ADMIN = "{" $IP_DESKTOP "}"
ACL_INET = "{" $IP_DESKTOP $IP_LAPTOP "}"
# TABLES
# GLOBAL OPTIONS
# TRAFFIC NORMALIZATION
scrub out on $IF_ADSL max-mss 1454
# QUEUEING RULES
# TRANSLATION RULES (NAT)
nat on $IF_INT from $ACL_ADMIN to $IP_MODEM -> $IP_ALIAS_MODEM
nat on $IF_INT from $ACL_INET to any -> ($IF_ADSL)
# FILTER RULES
pass in log all keep state
pass out log all keep state