pf macro def

[Roland Smith]

On Wed, Aug 03, 2005 at 07:05:30PM +0200, dick hoogendijk wrote:
> I'm in the process of rewriting a ipf firewall to a pf firewall script
> 
> I have a macro defined like:
>   tcp_services = "{ 21, 22, 25, 80, 113, 587, 110, 143, 993, 995, 6891,
> 49151:50251 }

The manual page for pf.conf places the braces between double quotes in
macro definitions: foo = "{" 21, 22, 49151:50251 "}"
 
> I use it in a rule like:
>   pass in on $ext_if inet proto tcp from any to $ext_if \
>      port $tcp_services flags S/SA keep state
> 
> My question is about the 49151:50251 port range. It's used by my
> PureFTP server. Is this a correct way of using the range. 

It should be according to the manual page. At least, that's how I read
the PARAMETERS section of pf.conf(5).

Roland
-- 
R.F.Smith (http://www.xs4all.nl/~rsmith/) Please send e-mail as plain text.
public key: http://www.xs4all.nl/~rsmith/pubkey.txt
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 187 bytes
Desc: not available
Url : http://lists.freebsd.org/pipermail/freebsd-questions/attachments/20050803/cf3f8c55/attachment.bin