ext_if="ndis0"
int_if="ed0"
internal_net="192.168.0.0/24"
external_addr="193.188.192.15"
scrub in all
# Queueing:
altq on $ext_if bandwidth 192Kb priq queue { internets, webserver }
queue internets priq(default)
queue webserver priority 0 priq
# NAT:
nat on $ext_if from $int_if:network to any -> ($ext_if)
rdr pass on $ext_if proto tcp from any to any port 8080 -> 192.168.0.2 port 8080
rdr pass on $ext_if proto tcp from any to any port 51986 -> 192.168.0.2 port 51986
pass quick on {lo0, $int_if}
block in log all
antispoof quick for $int_if inet
pass in on $ext_if proto tcp from any to ($ext_if) port 80 keep state queue webserv
er
pass out on $ext_if proto tcp all modulate state flags S/SA
pass out on $ext_if proto { udp, icmp } all keep state