blob: fa0f790566ff7a29634398517ba295c2e1114aeb (
plain)
1
2
3
4
5
6
7
8
|
nat on tun1000000 inet from 10.0.0.0/24 to any -> { 10.0.1.1, 10.0.1.2 } round-robin sticky-address
rdr on tun1000000 inet from any to 10.0.1.1 -> 10.0.0.0/24 random sticky-address
rdr on tun1000000 inet from any to 10.0.1.2 -> { 10.0.0.1, 10.0.0.2 } round-robin sticky-address
pass in proto tcp from any to any port = ssh keep state (source-track global)
pass in proto tcp from any to any port = smtp keep state (source-track global)
pass in proto tcp from any to any port = www keep state (source-track rule, max-src-states 3, max-src-nodes 1000)
pass in proto tcp from any to any port = ntp keep state (source-track rule, max-src-nodes 1000)
pass in proto tcp from any to any port = 321 keep state (source-track global, max-src-states 3)
|
