Public feed
#599585
12:00 <synk> ext="xl0"
12:00 <synk> int="rl0"
12:00 <synk> tcp_services="{ 22, 113, 80 }"
12:00 <synk> icmp_types="echoreq"
12:01 <synk> comp2="192.113.113.11"
12:01 <synk> set block-policy return
12:01 <synk> set loginterface $ext
12:01 <synk> set skip on lo
12:01 <synk> scrub in
12:01 <synk> nat on $ext from $int to any -> ($ext)
12:01 <synk> rdr on $ext proto tcp from any to any port 80 -> $comp2
12:01 <synk> block in
12:01 <synk> pass out keep state
12:01 <synk> antispoof quick for { lo $int }
12:01 <synk> pass in on $ext inet proto tcp from any to ($ext) port
$tcp_services flags S/SA keep state
12:01 <synk> pass in on $ext inet proto tcp from any to $comp2 port 80 \ flags
S/SA synproxy state
12:01 <synk> pass in inet proto icmp all icmp-type $icmp_types keep state
12:01 <synk> pass in quick on $int