From owner-freebsd-pf@FreeBSD.ORG Fri Feb 6 19:56:10 2015 Return-Path: Delivered-To: freebsd-pf@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [8.8.178.115]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTPS id 187D0859 for ; Fri, 6 Feb 2015 19:56:10 +0000 (UTC) Received: from mx2.security.edu.pl (mx2.security.edu.pl [91.197.89.218]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id C2C3034C for ; Fri, 6 Feb 2015 19:56:09 +0000 (UTC) Received: from mx2.security.edu.pl (mx2.security.edu.pl [192.168.34.10]) by mx2.security.edu.pl (Postfix) with ESMTP id 4F91342974E for ; Fri, 6 Feb 2015 20:56:07 +0100 (CET) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=i-pi.pl; s=dkim; t=1423252567; bh=oR6fbI9Z36yOOen1xtT3HbJTHd/aF8Xw9Y7yYQS9wHM=; h=Date:From:To:Subject; b=RxvgnrdVMMkT9DB7TONO0hhDsofRN1jHnm3g4OB0PftBSP3ZRIpKRrsbQCmIJDL4q bF7bgIQv2SneoPExA9xMUT9wMCKr6laG0qN/KDYxM2K+7CKVRi0CRJsCVZmehfPk33 /IcGW8w1yFV47+YGXj/bkN0LYxETDShGWCaclu6Q= Received: from pocztav2.i-pi.pl (unknown [192.168.34.11]) by mx2.security.edu.pl (Postfix) with ESMTPA id F378842974B for ; Fri, 6 Feb 2015 20:56:06 +0100 (CET) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=i-pi.pl; s=dkim; t=1423252567; bh=oR6fbI9Z36yOOen1xtT3HbJTHd/aF8Xw9Y7yYQS9wHM=; h=Date:From:To:Subject; b=RxvgnrdVMMkT9DB7TONO0hhDsofRN1jHnm3g4OB0PftBSP3ZRIpKRrsbQCmIJDL4q bF7bgIQv2SneoPExA9xMUT9wMCKr6laG0qN/KDYxM2K+7CKVRi0CRJsCVZmehfPk33 /IcGW8w1yFV47+YGXj/bkN0LYxETDShGWCaclu6Q= MIME-Version: 1.0 Content-Type: text/plain; charset=US-ASCII; format=flowed Content-Transfer-Encoding: 7bit Date: Fri, 06 Feb 2015 20:56:06 +0100 From: Lista PF To: freebsd-pf@freebsd.org Subject: Fwd: FreeBSD 10 + reverse ftp-proxy Organization: i-Pi sp. z o.o. Message-ID: <06ae8e0870798b33511a98cb975d64c4@i-pi.pl> X-Sender: a+pf@i-pi.pl User-Agent: Roundcube Webmail/1.0.3 X-Virus-Scanned: ClamAV using ClamSMTP X-BeenThere: freebsd-pf@freebsd.org X-Mailman-Version: 2.1.18-1 Precedence: list List-Id: "Technical discussion and general questions about packet filter \(pf\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 06 Feb 2015 19:56:10 -0000 Hello. I search little @google for this problem but i can't find any good solution for it. I have 2 pureftpd servers in my DMZ. FTP 1 INTERNET > 212.12.12.1:2121 > 192.168.34.12:2121 FTP 2 INTERNET > 212.12.12.2:2121 > 192.168.34.19:2121 And i try to set reverse proxy for it, i add to my pf.conf anchor "ftp-proxy/*" pass in log 212.12.12.1 inet proto tcp from any to 212.12.12.1 port 2121 flags S/SAFR modulate state divert-to lo0 port 9021 pass in log 212.12.12.2 inet proto tcp from any to 212.12.12.2 port 2121 flags S/SAFR modulate state divert-to lo0 port 9022 And i run 2 x ftp-proxy ftp-proxy -p 9021 -R 192.168.34.12 -P 2121 -D7 -v ftp-proxy -p 9022 -R 192.168.34.19 -P 2121 -D7 -v But when i try to check pf.conf syntax i got this error : /etc/pf.conf:106: syntax error 106: pass in log 212.12.12.1 inet proto tcp from any to 212.12.12.1 port 2121 flags S/SAFR modulate state divert-to lo0 port 9021 My uname -a : FreeBSD cerber 10.1-RELEASE FreeBSD 10.1-RELEASE #0 r274401: Tue Nov 11 21:02:49 UTC 2014 root@releng1.nyi.freebsd.org:/usr/obj/usr/src/sys/GENERIC amd64 Thanks for help. Best regards.