pass in on $int_if route-to ($ext_if1 $ext_gw1) inet proto tcp from $lan_net to any port { 80, 443 } flags S/SA modulate state
pass in on $int_if route-to ($ext_if2 $ext_gw2) inet proto tcp from $lan_net to any port { !80, !443 } flags S/SA modulate state
pass in on $int_if route-to ($ext_if2 $ext_gw2) inet proto { udp, icmp } from $lan_net to any keep state