On 10 March 2010 c. 12:09:07 [email protected] wrote:
> Apologies first.
>
> My first thought after waking up today was "I mixed IPs and IFs".
> Sorry for posting that...
>
> Remaining question second.
>
> The filtering does not seem to get "populated" by
> ftp-proxy.
>
> A rule like:
> pass in on $client_if proto { tcp udp } from $client \
> to 127.0.0.1 port ftp
>
> does not do the trick, I still have to use something like:
> pass in on $client_if proto { tcp udp } from $client \
> to 127.0.0.1
You forgot that rdr rule mangles destination, _including_ port:
pass in on $client_if proto { tcp udp } from $client \
to 127.0.0.1 port 8021
Or just add "pass" after "rdr" in the rdr rule.
--
Best wishes,
Vadim Zhukov
A: Because it messes up the order in which people normally read text.
Q: Why is top-posting such a bad thing?
A: Top-posting.
Q: What is the most annoying thing in e-mail?