forum.lissyara.su

Код: Выделить всё

ext_if = "nfe0"
int_if = "ste0"
lan="192.168.0.0/24"

table <white_list> { } 

set block-policy return 
set skip on lo0 
set skip on $int_if 
set loginterface $ext_if 
set optimization normal 

scrub in all 

nat on $ext_if from $lan to any -> $ext_if 
rdr on $ext_if proto { tcp, udp } from any to $ext_if port 9999 -> 192.168.0.3 port 3389

block in log all
block out log all 

pass quick on $int_if all
pass quick on lo0 all 

pass in on $ext_if proto { tcp, udp } from <white_list> to 192.168.100.143 port 3389 keep state

pass out on $ext_if from $lan to any keep state