pf macro def

dick hoogendijk dick at nagual.st
Wed Aug 3 17:05:12 GMT 2005


I'm in the process of rewriting a ipf firewall to a pf firewall script

I have a macro defined like:
  tcp_services = "{ 21, 22, 25, 80, 113, 587, 110, 143, 993, 995, 6891,
49151:50251 }

I use it in a rule like:
  pass in on $ext_if inet proto tcp from any to $ext_if \
     port $tcp_services flags S/SA keep state

My question is about the 49151:50251 port range. It's used by my
PureFTP server. Is this a correct way of using the range. Can I have it
like this in a macro definition?

-- 
dick -- http://nagual.st/ -- PGP/GnuPG key: F86289CE
++ Running FreeBSD 4.11-stable ++ FreeBSD 5.4
+ Nai tiruvantel ar vayuvantel i Valar tielyanna nu vilja


More information about the freebsd-questions mailing list