Date: Mon, 31 Oct 2011 10:07:04 +0100 From: Damien Fleuriot <ml@my.gd> To: freebsd-stable@freebsd.org Subject: Re: pf rdr rule question - corrected Message-ID: <4EAE6538.4030001@my.gd> In-Reply-To: <c677c67c90aed9e568895aaee0039732@antiszoc.hu> References: <c677c67c90aed9e568895aaee0039732@antiszoc.hu>
next in thread | previous in thread | raw e-mail | index | archive | help
On 10/31/11 12:04 AM, Gót András wrote: > Dear All, > > I'd like to have the following ruleset, for pure-ftpd passive port range: > > (pasv and past mistyping corrected) > > --- > ftp_pasv_start="X" > ftp_pasv_end="Y" > > rdr on $netif inet proto tcp from any to $internalip port > $ftp_pasv_start:$ftp_pasv_end -> $internalip > > pass in quick on $netif proto tcp from any to $internalip port > $ftp_pasv_start >< $ftp_pasv_end keep state flags S/SA > pass in quick on $netif proto tcp from any to $internalip port $ftp_pasv_start:$ftp_pasv_end Both keep state and flags S/SA are default, you don't need to write them.
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?4EAE6538.4030001>