Date: Wed, 3 Aug 2005 19:26:32 +0200 From: Roland Smith <rsmith@xs4all.nl> To: dick hoogendijk <dick@nagual.st> Cc: fbsdq <questions@freebsd.org> Subject: Re: pf macro def Message-ID: <20050803172632.GA33138@slackbox.xs4all.nl> In-Reply-To: <20050803190530.6ea0a9f3.dick@nagual.st> References: <20050803190530.6ea0a9f3.dick@nagual.st>
next in thread | previous in thread | raw e-mail | index | archive | help
[-- Attachment #1 --]
On Wed, Aug 03, 2005 at 07:05:30PM +0200, dick hoogendijk wrote:
> I'm in the process of rewriting a ipf firewall to a pf firewall script
>
> I have a macro defined like:
> tcp_services = "{ 21, 22, 25, 80, 113, 587, 110, 143, 993, 995, 6891,
> 49151:50251 }
The manual page for pf.conf places the braces between double quotes in
macro definitions: foo = "{" 21, 22, 49151:50251 "}"
> I use it in a rule like:
> pass in on $ext_if inet proto tcp from any to $ext_if \
> port $tcp_services flags S/SA keep state
>
> My question is about the 49151:50251 port range. It's used by my
> PureFTP server. Is this a correct way of using the range.
It should be according to the manual page. At least, that's how I read
the PARAMETERS section of pf.conf(5).
Roland
--
R.F.Smith (http://www.xs4all.nl/~rsmith/) Please send e-mail as plain text.
public key: http://www.xs4all.nl/~rsmith/pubkey.txt
[-- Attachment #2 --]
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.1 (FreeBSD)
iD8DBQFC8P5IEnfvsMMhpyURAiaoAJ9JBdMT3BbZIyYoQVJw/KUcODGElgCcDb0p
/MCKe+y2nzY26L87j7LJrE8=
=JhRW
-----END PGP SIGNATURE-----
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20050803172632.GA33138>