Untitled

##### define network interface
ext_if = "re0"
loop_if = "lo0"
jail_if1 = "vlan1"
jail_if2 = "vlan2"

tcp_services = "{22, 443}"

#### set options
set loginterface $ext_if
set block-policy drop
set state-policy if-bound
set limit {frags 5000, states 2500}
set debug urgent
set optimization aggressive
set skip on { $loop_if }

##### define misc
icmp_types = "echoreq"
allproto = "{tcp, udp, icmp, esp, ipencap}"
scrub on $ext_if reassemble tcp no-df random-id

##### NAT Rules
binat on $ext_if from 10.2.1.4/32 to any -> 192.168.1.20/32
binat on $ext_if from 10.2.1.5/32 to any -> 192.168.1.21/32

block in all
block out all
pass out all
pass in all