Fwd: FreeBSD 10 + reverse ftp-proxy

Lista PF a+pf at i-pi.pl
Fri Feb 6 19:56:10 UTC 2015


Hello.
I search little @google for this problem but i can't find any good 
solution for it.

I have 2 pureftpd servers in my DMZ.

FTP 1
INTERNET > 212.12.12.1:2121 > 192.168.34.12:2121

FTP 2
INTERNET > 212.12.12.2:2121 > 192.168.34.19:2121

And i try to set reverse proxy for it, i add to my pf.conf
anchor "ftp-proxy/*"
pass in log 212.12.12.1 inet proto tcp from any to 212.12.12.1 port 2121 
flags S/SAFR modulate state divert-to lo0 port 9021
pass in log 212.12.12.2 inet proto tcp from any to 212.12.12.2 port 2121 
flags S/SAFR modulate state divert-to lo0 port 9022

And i run 2 x ftp-proxy

ftp-proxy -p 9021 -R 192.168.34.12 -P 2121 -D7 -v
ftp-proxy -p 9022 -R 192.168.34.19 -P 2121 -D7 -v

But when i try to check pf.conf syntax i got this error :
/etc/pf.conf:106: syntax error
106: pass in log 212.12.12.1 inet proto tcp from any to 212.12.12.1 port 
2121 flags S/SAFR modulate state divert-to lo0 port 9021

My uname -a :
FreeBSD cerber 10.1-RELEASE FreeBSD 10.1-RELEASE #0 r274401: Tue Nov 11 
21:02:49 UTC 2014     
root at releng1.nyi.freebsd.org:/usr/obj/usr/src/sys/GENERIC  amd64


Thanks for help.

Best regards.


More information about the freebsd-pf mailing list