SSHD - Två portar och IP-nummer

## MACROS
# External network interface
ext_if = "fxp0"
# Define port to filter
port = "{ 22 }"
# Define ip or iprange to allow
ip = "{ 123.123.123.123 }"
#ip = "{ 123.123.123.0/8 }"

## TABLES
# No tables in this config

## GLOBAL OPTIONS
# Logging on external interface
set loginterface $ext_if
# What to do with blocked traffic
set block-policy return
# Don't filter localhost
set skip on lo0

## TRAFFIC NORMALIZATION
scrub in on $ext_if all fragment reassemble

## QUEUEING RULES
# No need for a queueing ruleset at this network

## TRANSLATION RULES (NAT)
# No need for a NAT ruleset at this network

## FILTER RULES
# Default to block all incoming connections on $port
block in on $ext_if to any port $port

# Allow outgoing packets
pass out flags S/SA keep state

# Blocking spoofed traffic
antispoof log quick for { lo0 } inet

# Allow incoming tcp-connections on port $port from $ip
pass in proto { tcp } from { $ip }_to any port $port \
        flags S/SA keep state