Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 3 Aug 2005 19:05:30 +0200
From:      dick hoogendijk <dick@nagual.st>
To:        fbsdq <questions@freebsd.org>
Subject:   pf macro def
Message-ID:  <20050803190530.6ea0a9f3.dick@nagual.st>

next in thread | raw e-mail | index | archive | help
I'm in the process of rewriting a ipf firewall to a pf firewall script

I have a macro defined like:
  tcp_services = "{ 21, 22, 25, 80, 113, 587, 110, 143, 993, 995, 6891,
49151:50251 }

I use it in a rule like:
  pass in on $ext_if inet proto tcp from any to $ext_if \
     port $tcp_services flags S/SA keep state

My question is about the 49151:50251 port range. It's used by my
PureFTP server. Is this a correct way of using the range. Can I have it
like this in a macro definition?

-- 
dick -- http://nagual.st/ -- PGP/GnuPG key: F86289CE
++ Running FreeBSD 4.11-stable ++ FreeBSD 5.4
+ Nai tiruvantel ar vayuvantel i Valar tielyanna nu vilja



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20050803190530.6ea0a9f3.dick>