ext_if="ng0" int_if="em0" int_net="192.168.1.0/24" www_srv="192.168.1.2" nat on $ext_if from $int_net to any -> ($ext_if) rdr on $ext_if inet proto tcp from any to any port 8080 -> $www_srv port 80
block log all pass quick on lo0 all pass quick on $int_if all pass in quick on $ext_if proto tcp from any to $www_srv port 80 flags S/SA modulate state pass in quick on $ext_if inet proto icmp all icmp-type echoreq keep state pass out quick on $ext_if proto { udp, tcp, icmp } from any to any keep state
