#######      macros
ext_if = "vr0"
int_if = "ale0"
localnet = $int_if:network

# simple services
tcp_services = "{ ssh, smtp, domain, http, https }"
udp_services = "{ domain }"

#######      nat and forwards


rdr pass on $ext_if inet proto tcp from any to ($ext_if) port 25 -> 192.168.1.250 port 25
#######      filtering
block all
pass in inet proto tcp to {$ext_if, $int_if} port { 10022 }
pass out proto tcp to any port $tcp_services keep state
pass proto udp to any port $udp_services keep state