Re: Issues with FTP and PF

2008-11-18 Thread Юрий Дмитришин
This works. Thanks. Try this: replace this line: pass in on $vpn_if inet proto tcp to $ext_addr port 21 \ flags S/SA keep state with this: pass in on $vpn_if inet proto tcp to $Srv port 21 \ flags S/SA keep state Remember rdr's happen before filtering, so when pf see's this

Issues with FTP and PF

2008-11-17 Thread Юрий Дмитришин
Hi. I have ftp server on vsftpd on ip 192.168.0.2 and a router 192.168.0.1. All ftp connections to 192.168.0.2 are fine but connections to my ext. ip (e.g. 78.78.78.78) are refused. Here's part of my pf.conf: # WAN vpn_if=tun0 # LAN int_if=vr1 # External Address ext_addr=78.78.78.78 # Server

Issues with FTP and PF

2008-11-17 Thread Yuriy A. Dmitrishin
Hi. I have ftp server on vsftpd on ip 192.168.0.2 and a router 192.168.0.1. All ftp connections to 192.168.0.2 are fine but connections to my ext. ip (e.g. 78.78.78.78) are refused. Here's part of my pf.conf: # WAN vpn_if=tun0 # LAN int_if=vr1 # External Address ext_addr=78.78.78.78 # Server

Re: Issues with FTP and PF

2008-11-17 Thread Dan
Yuriy A. Dmitrishin([EMAIL PROTECTED])@2008.11.17 12:47:51 +0200: Hi. I have ftp server on vsftpd on ip 192.168.0.2 and a router 192.168.0.1. All ftp connections to 192.168.0.2 are fine but connections to my ext. ip (e.g. 78.78.78.78) are refused. I think you are missing pass out tcp on

Re: Issues with FTP and PF

2008-11-17 Thread James Records
Try this: replace this line: pass in on $vpn_if inet proto tcp to $ext_addr port 21 \ flags S/SA keep state with this: pass in on $vpn_if inet proto tcp to $Srv port 21 \ flags S/SA keep state Remember rdr's happen before filtering, so when pf see's this packet it will have already been