From owner-freebsd-questions@FreeBSD.ORG  Sat Feb  4 13:57:34 2006
Return-Path: <owner-freebsd-questions@FreeBSD.ORG>
X-Original-To: questions@freebsd.org
Delivered-To: freebsd-questions@FreeBSD.ORG
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id 2AC9F16A422
	for <questions@freebsd.org>; Sat,  4 Feb 2006 13:57:34 +0000 (GMT)
	(envelope-from vaaf@broadpark.no)
Received: from osl1smout1.broadpark.no (osl1smout1.broadpark.no [80.202.4.58])
	by mx1.FreeBSD.org (Postfix) with ESMTP id 9EF7B43D53
	for <questions@freebsd.org>; Sat,  4 Feb 2006 13:57:32 +0000 (GMT)
	(envelope-from vaaf@broadpark.no)
Received: from broadpark.no ([217.13.4.96]) by osl1smout1.broadpark.no
	(Sun Java System Messaging Server 6.1 HotFix 0.05 (built Oct 21 2004))
	with ESMTP id <0IU6009331P4T3E0@osl1smout1.broadpark.no> for
	questions@freebsd.org; Sat, 04 Feb 2006 15:03:05 +0100 (CET)
Received: from [80.202.4.61] (Forwarded-For: [85.164.236.54])
	by bgo1mstore1.broadpark.no (mshttpd); Sat, 04 Feb 2006 14:57:57 +0100
Date: Sat, 04 Feb 2006 14:57:57 +0100
From: Kristian Vaaf <vaaf@broadpark.no>
To: questions@freebsd.org
Message-id: <fe7898d567d7.43e4c0f5@broadpark.no>
MIME-version: 1.0
X-Mailer: Sun Java(tm) System Messenger Express 6.1 HotFix 0.05 (built Oct 21
	2004)
Content-type: text/plain; charset=us-ascii
Content-language: en
Content-transfer-encoding: 7BIT
Content-disposition: inline
X-Accept-Language: en
Priority: normal
Cc: 
Subject: ftpd: Passive mode isn't working
X-BeenThere: freebsd-questions@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: User questions <freebsd-questions.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>, 
	<mailto:freebsd-questions-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-questions>
List-Post: <mailto:freebsd-questions@freebsd.org>
List-Help: <mailto:freebsd-questions-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>, 
	<mailto:freebsd-questions-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Sat, 04 Feb 2006 13:57:34 -0000


Hello!

Somehow my passive mode isn't working.

# cat /etc/inetd.conf

ftp stream tcp nowait root /usr/libexec/ftpd ftpd -l
ftp stream tcp6 nowait root /usr/libexec/ftpd ftpd -l

ftp-proxy stream tcp nowait root /usr/libexec/ftp-proxy ftp-proxy

auth stream tcp nowait root internal auth -r -f -n -o UNKNOWN -t 30 -d vaaf
auth stream tcp6 nowait root internal auth -r -f -n -o UNKNOWN -t 30 -d vaaf

ircd stream tcp nowait nobody /usr/local/sbin/bitlbee bitlbee

# cat /etc/pf.conf

int_if="ep0"
ext_if="rl0"

set block-policy drop

scrub in all

nat  on $ext_if from $int_if:network to any -> ($ext_if)

rdr on $int_if proto tcp from any to any \
port 21 -> 127.0.0.1 port 8021

rdr on $ext_if proto tcp from any to any \
port 50000 -> 192.168.187.2 port 50000

block drop log all

pass quick on { lo0 $int_if }

pass out on $ext_if inet proto { tcp, udp, icmp } \
from any to any keep state

pass in on $ext_if proto icmp \
from any to any

pass in on $ext_if inet proto { tcp, udp } \
from any to ($ext_if) port 53

pass out on $ext_if inet proto { tcp, udp } \
from any port 53 to any

pass out on $ext_if inet proto udp \
from any to any port 123 keep state

pass in on $ext_if inet proto tcp \
from any to ($ext_if) port { 21, 22, 25, 80, 110, 113, 143 } \
flags S/SA keep state

pass in on $ext_if inet proto tcp \
from any port 20 to ($ext_if) user proxy flags S/SA keep state

pass in on $ext_if proto tcp \
from any to any port 31337 keep state

pass in on $ext_if proto tcp \
from any to any port 50000 keep state

pass in on $ext_if proto tcp \
from any to any port 53333:55555 keep state

I hope somebody can tell what's wrong.

All the peace,
Vaaf