# If not outgoing to xl0 then skip to end
add 100 skipto 65000 all from any to any not xmit xl0
# deny spoofing
add 300 deny ip from any to any not antispoof in
add 400 deny ip from 10.0.0.0/8 to any in
add 400 deny ip from 127.0.0.0/8 to any in
add 400 deny ip from 172.0.0.0/12 to any in
add 400 deny ip from 192.0.2.0/24 to any in
add 400 deny ip from 192.168.0.0/16 to any in
# Limit uid 1001 max bandwidth
add 1001 pipe 1001 all from any to any
pipe 1001 config bw 128KBits/s
# Limit uid 1002 max bandwidth
add 1002 pipe 1002 all from any to any
pipe 1002 config bw 256KBits/s