1nat pass on em0 inet from 192.0.2.0/24 to any -> 198.51.100.1 2rdr pass on em0 inet proto tcp from any to 198.51.100.1 port = http -> 192.0.2.10 3rdr pass log on em0 inet proto tcp from any to 198.51.100.1 port = https -> 192.0.2.10 4rdr on em0 inet proto tcp from any to 198.51.100.1 port = ssh -> 192.0.2.10 5binat pass on em0 inet from 192.0.2.20 to any -> 198.51.100.20 6