now for the problems in your rules:

On Wed, Jul 20, 2011 at 3:39 AM, fqui nonez <fquinon...@gmail.com> wrote:
> # B  B  B  $OpenBSD: pf.conf,v 1.49 2009/09/17 06:39:03 jmc Exp $
> #
>
> set skip on lo
>
> ### Agregadas por mi: (added by me)
> block return
>
> pass in quick log on rl0 proto tcp from any to port 22
> pass out quick on rl0 to any
> pass in quick log on rl0 proto tcp from any to port 21
> pass in quick log on rl0 proto tcp from any to port 80

from any/ to any is implied

>
> ### Fin. (end)
>
> # filter rules and anchor for ftp-proxy(8)
> anchor "ftp-proxy/*"
> pass in quick proto tcp to port ftp rdr-to 127.0.0.1 port 8021
>
> pass B  B  B  B  B  B # to establish keep-state

this negates rule #0

>
> # By default, do not permit remote connections to X11
> block in on ! lo0 proto tcp to port 6000:6010

redundant if #0 works

>
> Thanks for your attention.

Reply via email to