129.241.139.xxx er ip til routeren
129.241.123.yyy er ip til maskin på intern-nettet
-bash-3.2# pfctl -sr
scrub in all fragment reassemble
block drop in on xl0 all
pass in on xl1 all flags S/SA keep state
pass out on xl1 all flags S/SA keep state
pass out on xl0 all flags S/SA keep state
pass quick on lo0 all flags S/SA keep state
pass log quick on tun0 all flags S/SA keep state
pass in log on xl0 inet proto tcp from any to 129.241.139.xxx port = ssh flags S/SA keep state
pass in log on xl1 inet proto tcp from any to 129.241.139.xxx port = ssh flags S/SA keep state
pass in log inet proto tcp from any to 129.241.139.146 port = www flags S/SA keep state
pass in log quick on xl0 inet proto igmp all keep state
pass in log on xl0 inet proto tcp from any to any port = 3389 flags S/SA keep state
pass in log on xl0 inet proto tcp from any to any port = bootpc flags S/SA keep state
pass in log on xl0 inet proto tcp from any to 129.241.123.yyy port = 1412 flags S/SA keep state
pass in quick on xl0 inet proto tcp from 129.241.123.yyy to 129.241.139.xxx port = 3128 flags S/SA keep state
pass in log quick on xl1 inet proto tcp from any to ! 129.241.123.0/24 port = 1412 flags S/SA keep state queue dc
pass in log quick on xl1 inet proto tcp from any to ! 129.241.138.0/23 port = 1412 flags S/SA keep state queue dc
pass in log quick on xl1 inet proto tcp from any to ! 129.241.123.0/24 port = 29105 flags S/SA keep state queue torrent
pass in log quick on xl1 inet proto tcp from any to ! 129.241.138.0/23 port = 29105 flags S/SA keep state queue torrent