ext_if = "em0"
jail_net = "192.168.123.0/24"

table <crowdsec-blacklists> persist
table <crowdsec6-blacklists> persist

set skip on lo

# NAT so jails can access internet
nat on $ext_if from $jail_net to any -> ($ext_if)

# Forward Luanti ports to its jail
rdr pass on $ext_if proto udp from any to any port 30000:40000 -> 192.168.123.11 port 30000:40000

block drop in quick from <crowdsec-blacklists> to any
block drop in quick from <crowdsec6-blacklists> to any

pass in all
pass out all