/etc/rc.conf
hostname="gateway"
server="gateway"
ifconfig_nfe0="DHCP"
ifconfig_rl0="inet 10.0.0.1 netmask 0xffffff00"
gateway_enable="YES"
pf_enable="YES"
miniupnpd_enable="YES"
dhcpd_enable="YES"
dhcpd_ifaces="rl0"
sshd_enable="YES"
lighttpd_enable="YES"
usbd_enable="YES"
linux_enable="YES"
sendmail_enable="NO"

/etc/pf.conf
ext_if="nfe0"
int_if="rl0"
tcp_services="{ 1338 }"
icmp_types="echoreq"
comp1="10.0.0.2"
set block-policy return
set loginterface $ext_if
set skip on lo
scrub in
nat on $ext_if from !($ext_if) -> ($ext_if:0)
rdr-anchor "miniupnpd"
rdr on $ext_if proto tcp from any to any port 1337 -> $comp1
block in
pass out keep state
anchor "miniupnpd"
antispoof quick for { lo $int_if }
pass in on $ext_if inet proto tcp from any to ($ext_if) port $tcp_services flags S/SA keep state
pass in on $ext_if inet proto tcp from any to $comp1 port 1337 flags S/SA synproxy state
pass in inet proto icmp all icmp-type $icmp_types keep state
pass in quick on $int_if

/usr/local/etc/dhcpd.conf
option domain-name "gateway";
option domain-name-servers 4.2.2.1, 4.2.2.2;
option subnet-mask 255.255.255.0;
default-lease-time 86400;
max-lease-time 86400;
ddns-update-style none;
subnet 10.0.0.0 netmask 255.255.255.0 {
  range 10.0.0.100 10.0.0.254;
  option routers 10.0.0.1;
}
host pc {
  hardware ethernet 00:17:31:b2:31:1d;
  fixed-address 10.0.0.2;
}
host xbox {
  hardware ethernet 00:12:5a:fe:50:24;
  fixed-address 10.0.0.3;
}

/etc/minupnpd.conf
ext_ifname=nfe0
listening_ip=10.0.0.1
port=2689
lease_file=/var/db/upnpd/upnpd.leases
allow 0-65535 10.0.0.0/8 0-65535
deny 0-65535 0.0.0.0/32 0-65535