forum.lissyara.su

Код: Выделить всё

int_if="re0"
ext_if="xl0"

set skip on re0


altq on $ext_if priq bandwidth 2000Kb queue { def_out, icmp_out, http_out, ssh_out }
queue def_out  priq(default)
queue icmp_out priority 15
queue http_out priority 14
queue ssh_out  priority 13

nat on xl0 from 10.0.0.0/24 to any -> 17*.*.*.**


block in on $ext_if all
block out on $ext_if all

pass in on re0 inet proto tcp from any to any port ssh

pass out on $ext_if inet proto { udp icmp } from ($ext_if) to any keep state
pass out on $ext_if inet proto tcp from ($ext_if) to any flags S/SA keep state queue def_out
pass out on $ext_if inet proto tcp from ($ext_if) to any port 80 queue http_out
pass out on $ext_if inet proto tcp from ($ext_if) to any port 22 queue ssh_out