ext_if="rl0"
webserver_jail_ip="192.168.1.3"
webserver_jail_forward_ports="{ 80, 443 }"
ports_jail_ip="192.168.1.5"
users_jail_ip="192.168.1.4"
users_jail_forward_ports="{ 6225 }"
scrub in all
# outgoing connections
nat pass on $ext_if from $webserver_jail_ip to any -> ($ext_if:0)
nat pass on $ext_if from $ports_jail_ip to any -> ($ext_if:0)
rdr on $ext_if proto tcp from any to any port $webserver_jail_forward_ports -> $webserver_jail_ip
rdr on $ext_if proto tcp from any to any port $users_jail_forward_ports -> $users_jail_ip