| 104 | Origional : |
| 105 | |
| 106 | |
| 107 | |
| 108 | my_int = "vtnet0" |
| 109 | internal_net = "192.168.0.0/16" |
| 110 | external_addr = "37.48.xx.xx" |
| 111 | nat on $my_int from $internal_net to any -> $external_addr |
| 112 | set skip on lo |
| 113 | block in log all |
| 114 | pass in on $my_int proto tcp from any to any port 22 keep state |
| 115 | pass in on $my_int proto tcp from any to any port 80 keep state |
| 116 | pass in on $my_int proto tcp from any to any port 1194 keep state |
| 117 | pass in on $my_int proto udp from any to any port 1194 keep state |
| 118 | pass in quick on $my_int proto icmp all keep state |
| 119 | pass in proto gre all keep state |
| 120 | pass in from any to $internal_net |
| 121 | pass in from $internal_net to any |
| 122 | pass out proto { gre, tcp, udp, icmp } all keep state |
| 123 | |
| 124 | }}} |
| 125 | |
| 126 | {{{ |