Configurazione - /etc/pf.conf


ext_if="fxp0"
int_if="fxp1"
pfsync_if="em0"
carp1="198.81.129.4"

set block-policy return

scrub in all

nat on $ext_if from $int_if:network to any -> $carp1

block in log on $ext_if
pass quick on { lo $int_if }
pass quick on $pfsync_if proto pfsync
pass quick on { $ext_if $int_if } proto carp keep state
pass out on $ext_if keep state