From owner-freebsd-questions@FreeBSD.ORG  Wed Aug  3 17:26:34 2005
Return-Path: <owner-freebsd-questions@FreeBSD.ORG>
X-Original-To: questions@freebsd.org
Delivered-To: freebsd-questions@FreeBSD.ORG
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id D7E0316A41F
	for <questions@freebsd.org>; Wed,  3 Aug 2005 17:26:34 +0000 (GMT)
	(envelope-from rsmith@xs4all.nl)
Received: from smtp-vbr11.xs4all.nl (smtp-vbr11.xs4all.nl [194.109.24.31])
	by mx1.FreeBSD.org (Postfix) with ESMTP id 4025843D49
	for <questions@freebsd.org>; Wed,  3 Aug 2005 17:26:33 +0000 (GMT)
	(envelope-from rsmith@xs4all.nl)
Received: from slackbox.xs4all.nl (slackbox.xs4all.nl [213.84.242.160])
	by smtp-vbr11.xs4all.nl (8.13.3/8.13.3) with ESMTP id j73HQW7e021450;
	Wed, 3 Aug 2005 19:26:32 +0200 (CEST)
	(envelope-from rsmith@xs4all.nl)
Received: by slackbox.xs4all.nl (Postfix, from userid 1001)
	id 30F4F610F; Wed,  3 Aug 2005 19:26:32 +0200 (CEST)
Date: Wed, 3 Aug 2005 19:26:32 +0200
From: Roland Smith <rsmith@xs4all.nl>
To: dick hoogendijk <dick@nagual.st>
Message-ID: <20050803172632.GA33138@slackbox.xs4all.nl>
References: <20050803190530.6ea0a9f3.dick@nagual.st>
Mime-Version: 1.0
Content-Type: multipart/signed; micalg=pgp-sha1;
	protocol="application/pgp-signature"; boundary="KsGdsel6WgEHnImy"
Content-Disposition: inline
In-Reply-To: <20050803190530.6ea0a9f3.dick@nagual.st>
User-Agent: Mutt/1.4.2.1i
X-GPG-Fingerprint: 1A2B 477F 9970 BA3C 2914  B7CE 1277 EFB0 C321 A725
X-GPG-Key: http://www.xs4all.nl/~rsmith/pubkey.txt
X-GPG-Notice: If this message is not signed, don't assume I sent it!
X-Virus-Scanned: by XS4ALL Virus Scanner
Cc: fbsdq <questions@freebsd.org>
Subject: Re: pf macro def
X-BeenThere: freebsd-questions@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: User questions <freebsd-questions.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>, 
	<mailto:freebsd-questions-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-questions>
List-Post: <mailto:freebsd-questions@freebsd.org>
List-Help: <mailto:freebsd-questions-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>, 
	<mailto:freebsd-questions-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Wed, 03 Aug 2005 17:26:35 -0000


--KsGdsel6WgEHnImy
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

On Wed, Aug 03, 2005 at 07:05:30PM +0200, dick hoogendijk wrote:
> I'm in the process of rewriting a ipf firewall to a pf firewall script
>=20
> I have a macro defined like:
>   tcp_services =3D "{ 21, 22, 25, 80, 113, 587, 110, 143, 993, 995, 6891,
> 49151:50251 }

The manual page for pf.conf places the braces between double quotes in
macro definitions: foo =3D "{" 21, 22, 49151:50251 "}"
=20
> I use it in a rule like:
>   pass in on $ext_if inet proto tcp from any to $ext_if \
>      port $tcp_services flags S/SA keep state
>=20
> My question is about the 49151:50251 port range. It's used by my
> PureFTP server. Is this a correct way of using the range.=20

It should be according to the manual page. At least, that's how I read
the PARAMETERS section of pf.conf(5).

Roland
--=20
R.F.Smith (http://www.xs4all.nl/~rsmith/) Please send e-mail as plain text.
public key: http://www.xs4all.nl/~rsmith/pubkey.txt

--KsGdsel6WgEHnImy
Content-Type: application/pgp-signature
Content-Disposition: inline

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.1 (FreeBSD)

iD8DBQFC8P5IEnfvsMMhpyURAiaoAJ9JBdMT3BbZIyYoQVJw/KUcODGElgCcDb0p
/MCKe+y2nzY26L87j7LJrE8=
=JhRW
-----END PGP SIGNATURE-----

--KsGdsel6WgEHnImy--