blob: bcccec9d179b9da4e7e3a0aa0a7d9d1f372f2134 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
|
nat on tun1000000 from 10.0.0.0/24 to any \
-> { 10.0.1.1, 10.0.1.2 } round-robin sticky-address
rdr on tun1000000 from any to 10.0.1.1 \
-> { 10.0.0.0/24 } sticky-address random
rdr on tun1000000 from any to 10.0.1.2 \
-> { 10.0.0.1, 10.0.0.2 } sticky-address
pass in proto tcp from any to any port 22 \
keep state (source-track)
pass in proto tcp from any to any port 25 \
keep state (source-track global)
pass in proto tcp from any to any port 80 \
keep state (source-track rule, max-src-nodes 1000, max-src-states 3)
pass in proto tcp from any to any port 123 \
keep state (source-track, max-src-nodes 1000)
pass in proto tcp from any to any port 321 \
keep state (source-track, max-src-states 3)
|
