Hello there,

I've the follow rules:

table <ftp> { xxx.xxx.xxx.xxx, yyy.yyy.yyy.yyy }
table <ftppriv> { 10.1.1.1, 10.1.1.2 }

...

pass in quick on $int_if proto tcp from <ftppriv> to port 21 rdr-to lo 8021
pass in quick on $int_if proto tcp from $int_if to <ftp> port 21 rdr-to lo
8021


anchor ftp-proxy/*

block log all

Alright, work fine ..

but, I've one rule thus:

pass in on $int_if from 10.1.1.23

As can see 10.1.1.23 not are in <ftppriv>
I think that it can access <ftp>
but access every place

if I remove this rule "pass in on $int_if from 10.1.1.23 " so, it work

As exists pass in quick rule , why this rule "annuls"

Any directions are welcome


Regards,

Reply via email to