Hello there,
I've the follow rules:
table <ftp> { xxx.xxx.xxx.xxx, yyy.yyy.yyy.yyy }
table <ftppriv> { 10.1.1.1, 10.1.1.2 }
...
pass in quick on $int_if proto tcp from <ftppriv> to port 21 rdr-to lo 8021
pass in quick on $int_if proto tcp from $int_if to <ftp> port 21 rdr-to lo
8021
anchor ftp-proxy/*
block log all
Alright, work fine ..
but, I've one rule thus:
pass in on $int_if from 10.1.1.23
As can see 10.1.1.23 not are in <ftppriv>
I think that it can access <ftp>
but access every place
if I remove this rule "pass in on $int_if from 10.1.1.23 " so, it work
As exists pass in quick rule , why this rule "annuls"
Any directions are welcome
Regards,