


# 
# Rule  0 (NAT)
# Translate source address
# for outgoing connections
match out on  le1 from 192.168.1.0/24 to any nat-to (le1) 
# 
# Rule  1 (NAT)
# Translate source address
# for outgoing connections
match out on  le2 from 192.168.1.0/24 to any nat-to (le2) 

# 
# Rule  0 (fxp0)
pass in   quick on fxp0 inet proto tcp  from 192.168.1.0/24  to any port { 80, 25 } no state  label "RULE 0 -- ACCEPT "  route-to { ( le1 192.0.2.10 ) } 
# 
# Rule  1 (fxp0)
pass in   quick on fxp0 inet proto tcp  from 192.168.1.0/24  to any port 22 no state  label "RULE 1 -- ACCEPT "  route-to { ( le2 192.0.3.10 ) } 
# 
# Rule  2 (fxp0)
pass in   quick on fxp0 inet proto tcp  from 192.168.1.0/24  to any port 22 flags any  label "RULE 2 -- ACCEPT "  route-to { ( le2 192.0.3.10 ) } 
# 
# Rule  fallback rule
#    fallback rule 
block  quick inet  from any  to any no state  label "RULE 10000 -- DROP "  

