# --- Variables ---
ext_if = "re0"
vpn_net = "10.8.0.0/24"

# --- Rules ---

# 1. Fix packet size for web browsing (MTU issue)
scrub on $ext_if all max-mss 1400

# 2. Perform NAT for the VPN clients
nat on $ext_if from $vpn_net to any -> ($ext_if)

# 3. Allow all traffic everywhere. This is the most relaxed setting possible.
pass all