On Mon, 31 Oct 2011 10:07:04 +0100, Damien Fleuriot wrote:
On 10/31/11 12:04 AM, Gót András wrote:
Dear All,
I'd like to have the following ruleset, for pure-ftpd passive port
range:
(pasv and past mistyping corrected)
---
ftp_pasv_start="X"
ftp_pasv_end="Y"
rdr on $netif inet proto tcp from any to $internalip port
$ftp_pasv_start:$ftp_pasv_end -> $internalip
pass in quick on $netif proto tcp from any to $internalip port
$ftp_pasv_start >< $ftp_pasv_end keep state flags S/SA
pass in quick on $netif proto tcp from any to $internalip port
$ftp_pasv_start:$ftp_pasv_end
Both keep state and flags S/SA are default, you don't need to write
them.
My problem is with the rdr rule, that the second macro won't get
evaluated correctly. I just copied the stateful match rule, to make it
more clear that with a pair of macros it's easier to set up.
FreeBSD version is 8.2.
Regards,
Andras
_______________________________________________
freebsd-stable@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-stable
To unsubscribe, send any mail to "freebsd-stable-unsubscr...@freebsd.org"
