pf rdr rule question
Gót András
andrej at antiszoc.hu
Sun Oct 30 22:31:52 UTC 2011
Dear All,
I'd like to have the following ruleset, for pure-ftpd passive port
range:
---
ftp_pasv_start="X"
ftp_past_end="Y"
rdr on $netif inet proto tcp from any to $internalip port
$ftp_pasv_start:$ftp_past_end -> $internalip
pass in quick on $netif proto tcp from any to $internalip port
$ftp_pasv_start >< $ftp_pasv_end keep state flags S/SA
---
My problem is that I got " unknown port $ftp_pasv_end" errors when I
try to load it with pfctl. Of course I checked the manual and there's
not much about macros in the nat rule section. Anyone knows what did I
do wrong or missed in the manual?
Thanks,
Andras
More information about the freebsd-stable
mailing list