Проброс портов во внутренюю сеть

firewall_enable="YES"
firewall_type="/etc/fw.conf"
natd_enable="YES"
natd_interface="re0"
natd_flags="-redirect_port tcp 192.168.3.201:3389 3389"

add 65010 divert 8668 ip4 from any to any via re0

ipfw add nat 2 all from any to to any
ipfw nat 2 config redirect_port tcp 192.168.3.201:22 2222 redirect_port tcp 192.168.3.201:9443 9443

#!/bin/sh

ipfw add 00020 nat tablearg ip from any to table\(33\) via ix0 in
ipfw add 60010 nat tablearg ip from table\(34\) to any via ix0 out

ipfw nat 21 config ip xx.xx.xx.xx log
ipfw table 33 add xx.xx.xx.xx 21
ipfw table 34 add xx.xx.xx.xx 21