mirror of
https://github.com/fwbuilder/fwbuilder
synced 2026-03-22 19:27:13 +01:00
29 lines
897 B
Plaintext
29 lines
897 B
Plaintext
|
|
|
|
|
|
#
|
|
# Rule 0 (NAT)
|
|
# Translate source address
|
|
# for outgoing connections
|
|
match out on le1 from 192.168.1.0/24 to any nat-to (le1)
|
|
#
|
|
# Rule 1 (NAT)
|
|
# Translate source address
|
|
# for outgoing connections
|
|
match out on le2 from 192.168.1.0/24 to any nat-to (le2)
|
|
|
|
#
|
|
# Rule 0 (fxp0)
|
|
pass in quick on fxp0 inet proto tcp from 192.168.1.0/24 to any port { 80, 25 } no state label "RULE 0 -- ACCEPT " route-to { ( le1 192.0.2.10 ) }
|
|
#
|
|
# Rule 1 (fxp0)
|
|
pass in quick on fxp0 inet proto tcp from 192.168.1.0/24 to any port 22 no state label "RULE 1 -- ACCEPT " route-to { ( le2 192.0.3.10 ) }
|
|
#
|
|
# Rule 2 (fxp0)
|
|
pass in quick on fxp0 inet proto tcp from 192.168.1.0/24 to any port 22 flags any label "RULE 2 -- ACCEPT " route-to { ( le2 192.0.3.10 ) }
|
|
#
|
|
# Rule fallback rule
|
|
# fallback rule
|
|
block quick inet from any to any no state label "RULE 10000 -- DROP "
|
|
|