ext_if="rl1" # replace with actual external interface name i.e., dc0
int_if="rl0" # replace with actual internal interface name i.e., dc1
internal_net="192.168.3.0/25"
internal_addr="192.168.3.4"
lan_addr = "192.168.3.4"
int_if = "rl0"
ext_if1 = "rl1"
ext_if2 = "rl2"
ext_gw1 = "61.17.42.1"
ext_gw2 = "202.88.239.81"
asianet_addr = "202.88.239.84"
vsnl_addr = "61.17.42.102"
# System Aliases
loopback = "{ lo0 }"
lan = "{ rl0 }"
asianet = "{ rl2 }"
vsnl = "{ rl1 }"
# Outbound NAT rules
#nat on $vsnl from 192.168.3.0/25 to any -> (rl1)
nat on $asianet from 192.168.3.0/25 to any -> (rl2)
#nat on $vsnl tagged TRICK -> (rl1)
#pass out quick on $vsnl from any to any
# allow all
pass in all
pass out all
#pass in log on $vsnl tagged TRICK keep state
pass in log quick on $asianet tagged TRICK keep state
#pass out log quick on $asianet route-to { ( rl1 61.17.42.1 ) , ( rl2 202.88.239.81 ) } round-robin to any keep state label "Load Balance rule"
#pass in quick on $lan from 192.168.3.0/25 to 192.168.3.4 keep state label "USER_RULE: Default LAN -> beastie"
#pass in quick on $lan route-to { ( rl1 61.17.42.1 ) , ( rl2 202.88.239.81 ) } round-robin from 192.168.3.0/25 to any keep state label "USER_RULE: Default LAN -> any"
#pass out log quick on $vsnl from $asianet_addr to any tag TRICK keep state
pass out log quick on $asianet from any to any tag TRICK keep state