[ikevmowe]

Originally Posted by J65nko

You also need a rule to pass out the traffic

pass out quick on $int_if tagged SSH

I have the following rules. Port 55555 is still not open.

# macros
ext_if="fxp0"
int_if="xl0"

comp3="192.168.0.3"

# options
set block-policy return
set loginterface $ext_if

set skip on lo

# scrub
scrub in

nat on $ext_if from !($ext_if) to any -> ($ext_if)

## my port forwarding rule
rdr on $ext_if proto tcp from any to any port 55555   tag SSH -> \
  192.168.0.3 port 22 


# filter rules
block in

pass in quick on $ext_if tagged SSH 
pass in quick on $int_if

pass out quick on $int_if tagged SSH
pass out keep state