Date: Wed, 3 Aug 2005 19:26:32 +0200 From: Roland Smith <rsmith@xs4all.nl> To: dick hoogendijk <dick@nagual.st> Cc: fbsdq <questions@freebsd.org> Subject: Re: pf macro def Message-ID: <20050803172632.GA33138@slackbox.xs4all.nl> In-Reply-To: <20050803190530.6ea0a9f3.dick@nagual.st> References: <20050803190530.6ea0a9f3.dick@nagual.st>
next in thread | previous in thread | raw e-mail | index | archive | help
--KsGdsel6WgEHnImy
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable
On Wed, Aug 03, 2005 at 07:05:30PM +0200, dick hoogendijk wrote:
> I'm in the process of rewriting a ipf firewall to a pf firewall script
>=20
> I have a macro defined like:
> tcp_services =3D "{ 21, 22, 25, 80, 113, 587, 110, 143, 993, 995, 6891,
> 49151:50251 }
The manual page for pf.conf places the braces between double quotes in
macro definitions: foo =3D "{" 21, 22, 49151:50251 "}"
=20
> I use it in a rule like:
> pass in on $ext_if inet proto tcp from any to $ext_if \
> port $tcp_services flags S/SA keep state
>=20
> My question is about the 49151:50251 port range. It's used by my
> PureFTP server. Is this a correct way of using the range.=20
It should be according to the manual page. At least, that's how I read
the PARAMETERS section of pf.conf(5).
Roland
--=20
R.F.Smith (http://www.xs4all.nl/~rsmith/) Please send e-mail as plain text.
public key: http://www.xs4all.nl/~rsmith/pubkey.txt
--KsGdsel6WgEHnImy
Content-Type: application/pgp-signature
Content-Disposition: inline
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.1 (FreeBSD)
iD8DBQFC8P5IEnfvsMMhpyURAiaoAJ9JBdMT3BbZIyYoQVJw/KUcODGElgCcDb0p
/MCKe+y2nzY26L87j7LJrE8=
=JhRW
-----END PGP SIGNATURE-----
--KsGdsel6WgEHnImy--
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20050803172632.GA33138>