正常实现内、外网端口映射的pf规则

服务器外网地址（wan_if)192.168.18.88/24

服务器内网地址（lan_if)192.168.16.4/24

网关地址：192.168.18.1

DNS：202.102.224.68

 

wan_if="em0"
lan_if="em1"
scrub in all

nat on $wan_if from $lan_if:network to any -> em0
rdr on $wan_if proto tcp from 192.168.18.0/24 to 192.168.18.88 port 3389 -> 192.168.16.154 port 3389
no nat on $lan_if proto tcp from $lan_if to 192.168.16.1/24
nat on $lan_if proto tcp from any to 192.168.16.154 port 3389 -> $lan_if
rdr on $lan_if proto tcp from $lan_if:network to 192.168.18.88 port 3389 -> 192.168.16.154 port 3389

pass all